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INTRODUCTION 


EVERY AMERICAN HAS A ROLE IN 
HOMELAND SECURITY 


“Are you guys ready? Let’s roll.” 


Todd Beamer, passenger of United Airlines Flight 93, 
September 11, 2001 


On September 11, 2001, United Airlines Flight 93 left Newark 
International Airport in New Jersey bound for San Francisco, 
California. Shortly after takeoff, a team of four terrorists seized control 
of the plane. From cell phone conversations the passengers and crew 
learned that other planes had been hijacked as well and crashed into 
the Twin Towers at the World Trade Center in New York and the 
Pentagon in Washington, DC. Passenger Tom Burnett called his wife 
and reassured her, “Don’t worry. We're going to do something.” 
Burnett, fellow passenger Todd Beamer, and others rushed the terror- 
ists. While Burnett and Beamer tried to retake control of the cockpit, 
the plane crashed into a field in rural Pennsylvania killing all aboard. 

The courage of the passengers and crew of Flight 93 prevented 
an even greater tragedy. In the wake of the terrible 9/11 attacks, 
however, Americans realized that determination and sacrifice 
alone were not enough to meet the threat of transnational terror- 
ism. In the years following, the nation undertook an unprece- 
dented effort to provide for domestic security. Our purpose is to 
describe the nature of the threat to the United States and how 
America is responding to the danger of terrorism—the policies, 
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INTRODUCTION 


principles, strategies, organizations, and programs that are respon- 
sible for protecting the homeland, incorporating the efforts of the 
federal government, state and local officials, business, nongovern- 
mental organizations, and private citizens. 

Many of the challenges presented by the tasks of homeland security 
are ubiquitous. They affect the personal safety of every American and 
impact every aspect of the nation’s political, financial, transportation, 
health, and legal systems. By some estimates, $100 billion is spent 
every year protecting Americans from harm.! There are few issues 
more important for each and every citizen to understand. All of us 
need a foundation in homeland security. 

This text provides the three core elements of knowledge required 
for understanding the challenge of protecting the homeland. Part 1 
covers how we got here from there, outlining America’s traditional 
approach to domestic security, the evolution of an unprecedented 
terrorist threat that led to the September 11 attacks, and the nation’s 
response to the events of 9/11. Part 2 offers an overview of con- 
temporary terrorists—who they are, what they want, and how they 
operate. This knowledge is essential to understanding the chal- 
lenge of homeland security. You must “know your enemy.” Part 3 
describes all the critical elements of the present homeland security 
regime. Knowing the enemy is not enough; good security requires 
“knowing yourself” as well. In respect to homeland security, that 
means we all must understand the measures being taken by gov- 
ernment officials, public servants, businesses, and average citizens. 
Part 3 elaborates on the following key concepts: the definition 
of homeland security, homeland security objectives, and roles and 
responsibilities. 


THE DEFINITION OF HOMELAND SECURITY 


The U.S. government defines homeland security as the domestic 
effort (as opposed to the overseas war on terrorism) to defend 
America from terrorists. In practice, homeland security efforts have 
also come to comprise general preparedness under the all-hazards 
doctrine, which focuses on common efforts that help prepare for both 
terrorist attacks and other natural or human-made catastrophes, such 
as hurricanes and accidental chemical spills. 
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XV 
Homeland Security Objectives 


The National Strategy for Homeland Security, released by the White 
House in 2002, has significantly shaped America’s homeland security 
agenda. The strategy set three strategic objectives: 


e Preventing Terrorism: The top priority in America’s strategy, this objec- 
tive includes improving “intelligence and warning” of terrorist 
activities; “border and transportation security” to keep terrorists 
and their weapons out of the country; and “domestic counterter- 
rorism,” activities by domestic law enforcement agencies to pre- 
vent and interdict terrorist activity. 


© Reducing Vulnerabilities: This objective entails “protecting critical 
infrastructure” and “defending against catastrophic terrorism,” or 
preventing terrorists from acquiring and using weapons of mass 
destruction and reducing the vulnerability of the nation to such 
attacks. 


© Minimizing Damage and Recovering from Attacks: The final strategic objective 
involves improving the nation’s capability to respond if an attack 
does occur. Enhancing “emergency preparedness and response” 
includes coordinated incident management processes and effective 
response capabilities, ranging from interoperable communications 
to stockpiling of vaccines. Training and support to state and local 
fire, emergency, and law enforcement personnel—often called “first 
responders”—is a key part of this objective. 


ROLES AND RESPONSIBILITIES 


The responsibility for achieving the national homeland security 
objectives falls upon every segment of American society, starting with 
federal, state, and local agencies, a vast and overlapping patchwork 
of more than 87,000 organizations.” 

Virtually all public servants—police officers, firefighters, emergency 
medical technicians, municipal workers, public health officials, prosecut- 
ing attorneys, councilpersons, mayors, governors, congresspersons, and 
employees at every federal agency—take part in protecting America from 
the threat of terrorism. 
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They all must cooperate with the corporate sector to protect what 
is called America’s “critical infrastructure.” As defined by Congress, 
critical infrastructure means “systems and assets, whether physical or 
virtual, so vital to the United States that the incapacity or destruction 
of such systems and assets would have a debilitating impact on secu- 
rity, national economic security, national public health or safety, or 
any combination of those matters.” In short, these are the physical 
assets that serve as the foundation of the American way of life—our 
governance, economic vitality, and free civil society. 

Critical infrastructure sectors include agriculture, food, water, pub- 
lic health, emergency services, government, the defense industrial 
base, information and telecommunications, energy, transportation, 
banking and finance, chemicals and hazardous materials, and postal 
and shipping. Homeland security policy also focuses on protecting 
cyberspace (the use of information technologies such as computers 
and the Internet) and “key assets” such as national monuments (like 
the Washington Monument in Washington, DC), nuclear power 
plants, dams, government buildings, and commercial facilities such 
as skyscrapers. 

Because an estimated 85 percent of critical infrastructure is owned 
by the private sector, American corporations and other commercial 
organizations play a central role in protecting the homeland. 
National homeland security efforts aim to coordinate and focus all 
these public and private organizations, along with the citizenry, by 
providing common priorities and principles, and coordinating 
national activities. 


A BOOK FOR PROFESSIONALS AND CITIZENS 


It is no longer an option, but a civic obligation, for Americans 
to understand the issues that confront our nation and do their part to 
defend both security and civil liberties. Every American has a role 
to play in the war against terrorism. Whether they are a government 
official coordinating a response to a terrorist act, an emergency respon- 
der rolling on a call, a citizen reporting a suspicious incident, a business 
leader deciding how to best protect employees, or a voter struggling 
with a controversial issue, all will benefit from a deeper understanding 
of homeland security issues. Homeland Security: A Complete Guide to 
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Understanding, Preventing, and Surviving Terrorism provides essential 
information for 

¢ Government leaders and managers 

e Emergency responders 

e Security personnel 

e Business executives 

e Concerned citizens 

e Volunteers 

e Students 


e Voters 


PRACTICAL INFORMATION 


While the book explores both the theoretical and historical underpin- 
nings of its topics, it is not primarily a work of theory or history. 
Homeland Security is a practical textbook and reference source to help 
its readers understand real-life situations, existing programs, and cur- 
rent policies. The chapters of the book include essential information on 


e The most dangerous enemy groups facing our nation 


e The tactics and weapons terrorists plan to use against us, includ- 
ing cyberterrorism and other modern threats 


e The truth behind the hype about weapons of mass destruction 


e Key national strategies for securing the homeland and combat- 
ing terrorism, plus their implications for first responders, corpo- 
rate America, and average citizens 


e The most important government and private-sector organiza- 
tions involved in homeland security—what they do and how 
they work, and sometimes don’t work, together 


e Practical resources to help readers protect themselves from dis- 
asters and assist in the prevention of terrorism 
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LEARNING OBJECTIVES, 
ORGANIZATION, AND STYLE USAGE 


Homeland Security is designed as a text for both academic and training 
courses in homeland security and terrorism. It supports the learning 
objectives established by the programs and guidelines of the Department 
of Homeland Security and the United States Citizen Corps. 

Chapters are presented in the order necessary to build a full con- 
ceptual foundation for understanding and responding to the threat of 
terrorism. Each chapter, however, stands alone. Each provides key 
learning objectives and a chapter quiz. The material in each chapter 
provides sufficient information to both master the learning objectives 
and answer the questions posed at the end of the chapter. Appendices 
provide additional information on niche areas of homeland security 
that may be of interest to professional emergency responders. 

Chapters also contain From the Source and Issues features. From 
the Source features provide excerpts from actual documents that 
influence homeland security policies. Issues features frame key con- 
troversial questions regarding various aspects of homeland security 
that remain subjects of ongoing debate. Both are provided as means 
to stimulate additional discussion on the learning objectives set up in 
each chapter. 

Significant attention has been given to maintaining consistent style, 
word usage, and definitions throughout the text. Readers will learn 
about many international terrorist organizations and key terms associ- 
ated with them. In general, the book follows the foreign language 
guidelines of The Chicago Manual of Style and in specific adopts the style 
of the U.S. State Department's style for common usages such as 
al-Qaida, Usama bin Ladin, and Hizballah. Where source documents are 
quoted, their original spellings are maintained. Additionally, terms and 
definitions regarding U.S. homeland security measures are consistent 
with those currently used by the Department of Homeland Security. 


A LASTING CHALLENGE 


The global war on terrorism will be a protracted conflict. We will need 
homeland security for a long time. In the years ahead, many Americans 
may find themselves playing roles they never expected. Most will meet 
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their obligations in quiet ways. Some will be called upon to display 
conspicuous heroism as shown by the emergency responders at the 
World Trade Center and Pentagon, the passengers aboard Flight 93, 
and the U.S. forces now battling terrorism around the world. All will 
need as much knowledge as possible to be successful. Knowledge is the 
first and most important shield in the war against terror. It is in that 
spirit that Homeland Security is presented. 


Mark A. Sauter and James Jay Carafano, Ph.D 


Washington, DC 


NOTES 


1. While the National Strategy for Homeland Security (September 2002), p. xiii, reports the 
“United States spends roughly $100 billion per year on homeland security,” the actual 
amount is open to debate. The cited estimate includes DHS agencies and federal, state, 
and local first responders and emergency services, but excludes most military spending. 
Private-sector estimates of total homeland security spending, which sometimes include 
international purchases of technology, range up to $138 billion a year. However, some far 
lower estimates focus on the increased spending due to the terrorist threat and exclude 
“normal” spending on law enforcement, fire fighting, and emergency services. 


2. Ibid, p. vii. 
3. USA PATRIOT Act, Public Law 107-56 (October 26, 2001). 
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CHAPTER 


HOMELAND SECURITY 
The American Tradition 


Those who expect to reap the blessings of freedom must, like men, undergo 
the fatigues of supporting it. 


Thomas Paine 


CHAPTER OVERVIEW 


Many Americans assume the 9/11 attacks represented an entirely 
new and unprecedented danger—that in decades past the isolation 
provided by two oceans had kept the homeland secure. This 
assumption is largely wrong. Tens of thousands of miles of border 
and coastline, wealth and resources, vast territory, a diverse popula- 
tion, and open civil society have long made the civilian population 
of the United States a tempting target. To some degree, every gener- 
ation of Americans has experienced the anxiety that they might be 
attacked in their own homes. Each has held public debate over the 
sufficient means necessary to protect the nation—the right balance of 
security; economic growth; cooperation among federal, state, and 
local government; and protection of civil liberties. Over time, 
American national security policy became increasingly focused on 
offensive capabilities while the balance between domestic security 
and civil liberties tilted toward the latter. These traditions proved 
unable to protect America from the attackers of 9/11 and the mod- 
ern terrorist threat. 


Sauter ch01-03 


3/21/05 


2:52 PM Page 4 $ 


PART 1 * HOW WE GOT HERE FROM THERE 
CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Identify principles that have guided domestic security efforts 
since colonial times. 


2. Explain the traditional level of cooperation between federal, 
state, and local agencies for domestic security and national 
preparedness. 


3. Gauge the general level of economic resources the United 
States has dedicated to homeland security during its history 
and what factors affected expenditures. 


4. Describe the role that the protection of civil liberties has 
played in determining the federal role in homeland security. 


5. List some factors that limited the nation’s capability to protect 
the American homeland immediately prior to 9/11. 


THE EARLIEST DAYS: 
SECURING BORDERS AND COASTS 


During America’s first century, protecting the homeland remained 
mostly a matter of defending towns, borders, and coastline from 
external attackers. Conflicts between colonists and Indians played a 
principal role in the formulation of an American conception of 
national security. Communities were largely responsible for protect- 
ing their citizens, usually through local militias.! Nor did the federal 
government play a large role in civil preparedness or responding to 
disasters. The earliest case of congressionally approved domestic 
assistance followed a devastating fire in Portsmouth, New Hamp- 
shire, in 1803. To ease the burden, Congress granted an extra year to 
pay off bonds owed at the local customhouse. Such measures were an 
exception rather than the rule. 

In the early years of the Republic, invasion by Great Britain— 
which razed Washington, DC, during the War of 1812—and the secu- 
rity of the border with Canada were also national preoccupations. 
These fears declined by 1823, but a series of midcentury border crises 
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Federal Power 
versus Civil 
Liberties 


led to renovation of existing forts and harbor defenses. Still, invest- 
ments in defense were modest, accounting for only a small percent- 
age of the gross domestic product (GDP). The notion of large 
peacetime security budgets was anathema to most Americans. This 
tradition was abandoned only in wartime or other moments of 
national crisis.? By 1870 trepidation over threats to the northern bor- 
der and eastern coastline had mostly disappeared, with the exception 
of a short-lived flap during the Spanish-American War that stirred 
unfounded fears of a Spanish armada threatening the coast. In the 
South, episodic apprehension about foreign incursions culminated 
with the punitive expedition into Mexico in 1916-1917 and patrols on 
the border through 1929.3 


THREATS FROM WITHIN 


Through most of the nation’s history threats from within the borders of 
the United States were less central to American concepts of homeland 
security. Internal threats have been transient and often regional in focus. 
The federal government’s role in providing defense against domestic 
threats has always been suspect. During the nineteenth century, draw- 
ing on longstanding antiarmy ideology and the colonial experience, 
Americans generally opposed using federal forces for internal security.’ 
Intervention was considered acceptable only in cases of insurrection, 
widespread public disorder, or extreme domestic terrorism. Before the 
Civil War, state consent or requests for assistance by state authorities 
always accompanied the domestic use of federal force.° 


The Civil War placed enormous strains on the proposition that the fed- 
eral government could ensure domestic security without abrogating 
the constitutional rights of its citizens. The Union home front faced not 
only major military attack, but raids, draft riots, espionage, and sabo- 
tage—in one case Confederate spies tried to burn down New York 
City. Federal authorities responded with an unprecedented test of the 
limits of their power; they suspended the right of habeas corpus, 
which requires the government to provide justification before a judge 
in order to hold a prisoner, and prosecuted U.S. civilians (including 
conspirators in Lincoln’s assassination) in military tribunals.° 
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ISSUES: 


CIVIL LIBERTIES AND SECURITY—HABEAS CORPUS 
DURING THE CIVIL WAR 


Among the civil liberties guaranteed by the U.S. Constitution is 
that “The privilege of the Writ of Habeas Corpus shall not be sus- 
pended, unless when in Cases of Rebellion or Invasion the public 
Safety may require it.” A writ of habeas corpus is a judicial man- 
date to a prison official ordering that an inmate be brought to the 
court so it can be determined whether or not that person is impris- 
oned lawfully. In 1862, President Lincoln suspended habeas cor- 
pus. Among the 13,000 people arrested under martial law was a 
Maryland Secessionist, John Merryman. Supreme Court Justice 
Roger B. Taney, ruled in the case of Ex parte Merryman, that sus- 
pension of habeas corpus was unconstitutional. Lincoln ignored 
the ruling. After the war, the Supreme Court officially restored 
habeas corpus in Ex parte Milligan, ruling that military trials where 
the civil courts were capable of functioning were illegal. 


Excerpts from Ex Parte Milligan, 71 U.S. 2 (1866) 


On the 10th day of May, 1865, Lambdin P. Milligan pre- 
sented a petition to the Circuit Court of the United States for 
the District of Indiana to be discharged from an alleged 
unlawful imprisonment. The case made by the petition is 
this: Milligan is a citizen of the United States; has lived for 
twenty years in Indiana, and, at the time of the grievances 
complained of, was not, and never had been, in the military 
or naval service of the United States. On the 5th day of 
October, 1864, while at home, he was arrested by order of 
General Alvin P. Hovey, commanding the military district of 
Indiana, and has ever since been kept in close confinement. 

During the late wicked Rebellion, the temper of the 
times did not allow that calmness in deliberation and dis- 
cussion so necessary to a correct conclusion of a purely judi- 
cial question. Then, considerations of safety were mingled 
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with the exercise of power, and feelings and interests pre- 
vailed which are happily terminated. Now that the public 
safety is assured, this question, as well as all others, can be 
discussed and decided without passion or the admixture of 
any element not required to form a legal judgment. 

No graver question was ever considered by this court, 
nor one which more nearly concerns the rights of the whole 
people, for it is the birthright of every American citizen when 
charged with crime to be tried and punished according to law. 

It is essential to the safety of every government that, in a 
great crisis like the one we have just passed through, there 
should be a power somewhere of suspending the writ of 
habeas corpus. 

[but] It is difficult to see how the safety for the country 
required martial law in Indiana. If any of her citizens were 
plotting treason, the power of arrest could secure them 
until the government was prepared for their trial, when the 
courts were open and ready to try them . . . Milligan’s trial 
and conviction by a military commission was illegal. 


1. Was the Supreme Court’s decision in Ex parte Milligan correct? 
What constitutional issues were at stake, and how do they 
relate to homeland security? 


2. How should society strike a balance between security and 
civil liberties? 

3. What were the implications of Ex parte Milligan for providing 
domestic security? 


4. Is the precedent of Ex parte Milligan applicable to the chal- 
lenges of combating terrorism today? 


An even more significant departure from the traditions of U.S. 
security, however, was the use of soldiers as federal marshals during 
Reconstruction. After the presidential election of 1876, the president 
dispatched troops to polling stations in South Carolina, Louisiana, 
and Florida where electoral votes remained in dispute. In a reflection 
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of the ongoing national debate between security and government 
power, this measure precipitated calls for the passage of the Posse 
Comitatus Act of 1878, which prohibited federal troops from enforc- 
ing state or federal laws without congressional approval.” 


American history from the Civil War to the turn of the century also 
saw dramatic episodes of labor unrest and domestic terrorism, 
including Ku Klux Klan activity in the South and Midwest and the 
assassination of President William McKinley. These incidents were 
initially treated more as criminal acts than serious national threats. 
There was strong resistance to strengthening internal security based 
on longstanding traditions of distrust of government power. 
Americans looked for cheap, short-term solutions to domestic threats. 
Despite Posse Comitatus, military forces were often relied on as an 
expedient. Between 1875 and 1918, state militia or federal troops 
responded over 1,000 times to labor unrest, viewed by many as insti- 
gated by foreign influences.® 

Fear over the threat of anarchists and communists, called the Red 
Scare, grew in 1919 after an attempted bomb attack against the U.S. 
attorney general. Congress rushed through $500,000 in funding for a 
new antiradical unit in the Department of Justice’s Bureau of 
Investigation, led by a young official named J. Edgar Hoover. In early 
1920, federal agents conducted raids across the nation, taking thou- 
sands of suspected radicals, many of them immigrants, into custody 
and prompting an outcry from civil libertarians.” 

The violence peaked in September 1920, when a bomb pulled by a 
horse cart tore through Wall Street in lower Manhattan, ripping apart 
pedestrians and pelting occupants of nearby offices with waves of 
broken glass that one witness likened to a snowstorm. “What hap- 
pened came without warning,” said John Markle, a Pennsylvania 
mining executive on a business trip to the financial district, “(t)here 
was no time to duck .. .” As the smoke cleared, victims of the terror- 
ist attack could be seen strewn across the pavement like “lifeless 
lumps of clay.” The crime was never solved. 

The role of federal domestic security forces grew, although some- 
times haltingly, throughout this period. Americans expected counties, 
cities, and states to fulfill most of their governmental needs. But the 
nation lacked the means to deal with interstate crimes, a growing con- 
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cern in a society that saw new technologies emerge that could move 
people, goods, and services across state borders with increasing 
speed and frequency. The need for a national bureau of investigation 
became particularly apparent during the years of Prohibition, which 
saw an unprecedented increase in organized crime. 

The government’s role in national preparedness also grew in fits 
and starts. Traditionally, federal agencies did not have a prominent 
role in responding to disasters, though the Congress did periodically 
provide assistance. Over the course of the century, ad hoc legislation 
was passed more than 100 times in response to hurricanes, earth- 
quakes, floods, and other natural disasters. As the size of the federal 
government grew, a myriad of agencies and programs emerged that 
offered some assistance to state and local governments in preparing 
for, responding to, or mitigating natural disasters, but little thought 
was given to how to respond to terrorist acts. 


THE NEW GREAT POWER FACES FOREIGN THREATS 


By the dawn of the twentieth century, as the nation grew in power and 
stature, it was increasingly eyed as a potential economic and military 
competitor by European and Asian powers. Soon foreign threats once 
again became the focus of security concerns. For example, Americans 
feared, and some of the Kaiser’s military strategists actually proposed, 
German amphibious operations against the United States. The 
American occupation of Haiti from 1915 to 1934 was justified in part 
to secure avenues of approach to the United States through the 
Caribbean.!° Operations such as this and persistent public calls for 
improving U.S. defenses against foreign invasion were perennial fea- 
tures of national security debates throughout the first half of the 1900s. 


WORLD WAR I: DEFENSE AGAINST SABOTAGE 


As the prospects for the United States being drawn into World War I 
loomed, and the Red Scare peaked, Americans were greatly concerned 
that foreign provocateurs would fan dissent on the home front. 
Concerns over espionage and sabotage were also acute. The Espionage 


—P— 


Sauter ch01-03 


10 


3/21/05 


2:52 PM Page 10 5 


PART 1 ¢ HOW WE GOT HERE FROM THERE 


Act of 1917 was followed by the Sedition Act of 1918. Created to pre- 
vent interference with the recruitment of troops or exposure of national 
security information, the Sedition Act made it a federal crime to criti- 
cize the government or Constitution. Both acts were repealed in 1921. 

To secure the homeland, authorities created an ad hoc security sys- 
tem that included Army and Navy Intelligence and the Department 
of Justice, as well as quasi-private, volunteer organizations like the 
Minnesota Commission for Public Safety. This makeshift network 
largely succeeded in thwarting Imperial German intelligence agents, 
though it was inefficient and prone to abuse, as some security agen- 
cies were used for partisan politics, to dispense vigilante justice, and 
as part of the crackdowns involved in the Red Scare. The system was 
abandoned after the war, and most of the volunteer organizations 
were quickly abolished." 


FROM THE SOURCE: 
THE SEDITION ACT OF 1918 


More than 2,000 prosecutions occurred under the Espionage and 
Sedition Acts. The most famous of which was that of American 
labor leader and Socialist presidential candidate Eugene V. Debs, 
who was sentenced to 10 years in prison for an antiwar speech he 
made in Canton, Ohio, on June 16, 1918. Among the provisions of 
the Sedition Act were restrictions against free speech and use of 
the postal service. 


Excerpt from the Act 


SECTION 3. Whoever, when the United States is at war, 
shall willfully make or convey false reports or false state- 
ments with intent to interfere with the operation or suc- 
cess of the military or naval forces of the United States, or 
to promote the success of its enemies, or shall willfully 
make or convey false reports, or false statements, . . . or 
incite insubordination, disloyalty, mutiny, or refusal of 
duty, in the military or naval forces of the United States, or 
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shall willfully obstruct . . . the recruiting or enlistment 
service of the United States, or . . . shall willfully utter, 


print, write, or publish any disloyal, profane, scurrilous, 
or abusive language about the form of government of the 
United States, or the Constitution of the United States, or 
the military or naval forces of the United States . . . or shall 
willfully display the flag of any foreign enemy, or shall 
willfully . . . urge, incite, or advocate any curtailment of 
production . . . or advocate, teach, defend, or suggest the 
doing of any of the acts or things in this section enumer- 
ated and whoever shall by word or act support or favor 
the cause of any country with which the United States is at 
war or by word or act oppose the cause of the United 
States therein, shall be punished by a fine of not more than 
$10,000 or imprisonment for not more than twenty years, 
or both... 

SECTION 4. When the United States is at war, the 
Postmaster General may, upon evidence satisfactory to 
him that any person or concern is using the mails in viola- 
tion of any of the provisions of this Act, instruct the post- 
master at any post office at which mail is received 
addressed to such person or concern to return to the post- 
master at the office at which they were originally mailed 
all letters or other matter so addressed, with the words 
“Mail to this address undeliverable under Espionage Act” 
plainly written or stamped upon the outside thereof, and 
all such letters or other matter so returned to such post- 
masters shall be by them returned to the senders thereof 
under such regulations as the Postmaster General may 
prescribe. 


WORLD WAR Il 


The period immediately leading up to World War II proved a water- 
shed in the evolution of American concerns over protecting the home- 
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land. Pressure grew to shift efforts to a more offensive-oriented pos- 
ture. Army and Navy planners argued over whether the United 
States should adopt a “continental” defense, focused on securing the 
borders, or a “hemispheric” defense, a more offensive stance, cen- 
tered on protecting the homeland from strategic points in the 
Atlantic, South America, and the Pacific. Political leaders, however, 
issued scant policy guidance and invested few resources. The public 
was largely apathetic toward security debates until the war’s eve.” 


Once war broke out, the federal government moved to protect America’s 
home front. Though untested by a major threat, wartime efforts to pro- 
tect ports and other key infrastructure were prodigious, including the 
fielding of more than 200,000 auxiliary military police to guard over 
16,000 facilities. Millions more citizens signed up for civilian defense 
units that provided surveillance and emergency response capabilities— 
including programs designed to prepare for a Nazi chemical attack.! 


Civilian Defense 


The enemy provided relatively few targets for those patriotic volun- 
teers. During World War II there were only a handful of ineffectual 
attacks on the continental United States. In June 1942, German sub- 
marines landed eight trained saboteurs on Long Island, New York, 
and near Jacksonville, Florida, as part of a plan called Operation 
Pastorius. The German infiltrators had spent years in the United 
States—at least two held U.S. citizenship—and they carried enough 
cash and sophisticated explosives equipment to destroy key infra- 
structure across the nation. On the West Coast, a seaplane launched 
from a Japanese submarine dropped an incendiary bomb near 
Brookings, Oregon, in September 1942. But the threat of attack in the 
homeland turned out to have greater legal than strategic implications. 


Major Impacts on Civil Liberties 


Turned in by one of their own, the German saboteurs were quickly cap- 
tured. The legal process following their capture—all were convicted 
and six were put to death—established the executive branch’s power to 
categorize certain individuals as “enemy combatants,” instead of “pris- 
oners of war,” and try them before military tribunals, even if they held 
USS. citizenship. Meanwhile, the War Relocation Authority was direct- 
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Communist 
Infiltration 


ing the evacuation of over 100,000 persons of Japanese ancestry, pur- 
portedly to preclude acts of sabotage and spying. Both decisions 
sparked debate decades later when they were cited as precedents in 
debates over the appropriate response to the 9/11 attacks. 


THE COLD WAR 


For a brief period following World War II, Americans were largely 
unconcerned about external threats. Then in 1949 the Soviet Union 
tested its first nuclear weapon, followed less than a year later by the out- 
break of the Korean War. These events brought the Cold War home to 
Main Street America. As the conflict grew more intense, a high level of 
sustained investment in national security marked a departure from past 
policies. Between 1948 and 1989, the United States spent an average of 
7.5 percent of its GDP each year on defense, compared to the 1 or 2 per- 
cent spent annually on the military for most of the nation’s history.'* 


During the early years of the Cold War, fear of communist agitation 
and sabotage ran high. Extensive countermeasures included a mas- 
sive security and personnel screening program for port facilities. 
Though concern over Soviet espionage was evident before World War 
II and was an enduring feature of the Cold War, it was only during 
the first half of the 1950s that the problem monopolized public atten- 
tion as a homeland security issue. 

At the outset of the Cold War, the United States experimented with 
a defense-in-depth approach, employing everything from coastal 
antiaircraft posts and civil defense patrols to atomic diplomacy. The 
United States did not begin to build a deterrent force until 1948. As 
late as 1957, a highly publicized and controversial presidential blue- 
ribbon panel study, popularly known as the Gaither Report, argued 
that deterrence was inadequate and called for a massive bomb shelter 
building program." Still, by the middle of the decade offensive meas- 
ures had become the preferred means for protecting the nation, to the 
point that some argued for launching a preemptive strike against the 
Soviet Union. Close-in defensive measures, like air and civil defenses, 
withered.!” During this period, Americans worried about threats 
ranging from radiological attacks by secret agents to the poisoning of 
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water reservoirs, but the dominant concern was the Soviet nuclear 
arsenal. The United States considered and then discarded plans to 
build a limited antiballistic missile system as both impractical and too 
expensive, a pattern to be repeated in the 1980s. 


Overwhelming reliance on deterrence was an unprecedented feature 
of Cold War competition. Rather than defending the homeland on 
U.S. shores, the United States decided to rely on threats of preemption 
or massive nuclear retaliation to a Soviet attack. This approach 
squelched demand for increased civil defense and preparedness, both 
for natural and human-caused disasters. It was not until 1979, in 
response to the complaints of state and local governments over the 
plethora of federal agencies that had to be coordinated with follow- 
ing hurricanes, floods, and earthquakes, that the Federal Emergency 
Management Agency (FEMA) was established to coordinate all fed- 
eral support to state and local governments. Ironically, as the Cold 
War dragged on—and anxiety over attacks on U.S. soil gradually 
eased and overall defense spending as a percentage of GDP 
declined—the size of the Soviet arsenal actually increased. 


THE THREAT OF SHADOW WAR 


In contrast to the dominant place of the Soviet Union in American 
threat perceptions, concern over terrorism waxed and waned over the 
twentieth century, even as a range of groups carried out attacks 
against the United States. 


September 11 was far from the first time terrorists set their sights on 
Washington, DC. Puerto Rican extremists shot up the Capitol and 
tried to kill President Truman in separate incidents during the 1950s. 
Terrorists seeking the independence of Puerto Rico would launch 
many more attacks in the following decades. Right-wing radical 
Klansmen bombed a Birmingham, Alabama, church in 1963, murder- 
ing four teenagers. Klan beatings, whippings, and floggings contin- 
ued through much of the 1960s. At the same time, the seeds of 
domestic ideological terrorism were being sown in the movement 
against the Vietnam War, which spawned left-wing terrorist groups, 


—$— 


Sauter ch01-03 3/21/05 


2:52 PM Page 15 5 


CHAPTER 1 •e HOMELAND SECURITY 15 


International 
Terrorism 


including one that bombed the U.S. Capitol in 1971. By 1975 the num- 
ber of terrorist groups active in America was so large that when a 
bomb exploded in New York’s LaGuardia Airport, killing 11 people, 
the police faced a dizzying array of suspects. Although left-wing 
extremists, Puerto Rican liberationists, the Jewish Defense League, 
the Palestinian Liberation Organization (PLO), and Croatian nation- 
alists came under suspicion—among others—the crime was never 
solved. 

The FBI, CIA, and other government agencies employed aggres- 
sive intelligence gathering and covert tactics to crack down on terror- 
ist groups. But in the 1970s, the American public learned many of 
these same strategies had been used against lawful dissidents and 
civil rights groups. Such abuses prompted congressional hearings 
and led to dramatic restrictions on domestic intelligence operations, 
including the creation of a bureaucratic “wall” between intelligence 
gathering and law enforcement.18 Decades later, the wall would ham- 
per investigations of al-Qaida terrorists preparing to attack the 
United States. Still, by the 1980s, most nationalist and left-wing ideo- 
logical terrorist groups in the United States had collapsed. 


The rise of spectacular Palestinian and European terrorism during the 
1960s and ‘70s, often sponsored by the Soviet bloc, failed to prompt 
substantial U.S. action. But the mid-1980s saw increasing concerns 
about the terrorist threat to the United States. These included fears 
that small nuclear devices might be used to strike the 1984 Olympiad 
in Los Angeles.!? The Soviet role in terrorism was hotly debated, 
although the actual threat to the United States may have been far 
greater than was commonly assumed.”? 

Still, the focus remained on threats to Americans abroad. Amid 
attacks on U.S. airliners, embassies, and military bases during the 
1980s—and a Libyan attempt to pay a Chicago street gang to conduct 
terrorist attacks in America—the United States moved against so- 
called state-sponsored terrorist groups backed by nations such as 
Iran, Syria, and Libya. 

By 1986, the United States had launched military strikes against 
Libya and placed sanctions on it, Iran, and Syria. “History is likely to 
record that 1986 was the year when the world, at long last, came to 
grips with the plague of terrorism,” commented President Ronald 
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Reagan in May 1986. In reality, the policies had not ended terrorism 
supported by state sponsors. In April 1988, Japanese citizen Yu 
Kikumura was arrested at a New Jersey rest stop. In his car police 
found three powerful antipersonnel bombs built into fire extinguish- 
ers. According to prosecutors, Kikumura was working for Libya on a 
mission to strike New York City. The Libyan campaign peaked on 
December 21, 1988, when Pan Am Flight 183 exploded over 
Lockerbie, Scotland, killing 270 passengers and people on the ground. 
Iran too continued its backing of terrorist groups such as Hizballah. 

Still, by the later 1980s, U.S. policy makers perceived the terrorism 
threat as reduced and primarily of risk to Americans abroad; the 
White House was far more focused on the breakup of the Soviet 
Union. Ironically, as will be seen later, the decline of the Soviets—one 
of the very factors that weakened traditional state-sponsored terrorist 
groups and reduced American attention to the issue—inspired 
Usama bin Ladin and helped pave the road to 9/11. 


THE EMERGING THREAT TO AMERICA’S HOMELAND 


After the Cold War, the nation’s approach to combating threats to the 
homeland assumed a more traditional pattern. Defense spending was 
reduced to under 3 percent of GDP.” But a new threat was growing— 
Islamic extremists with ideological and often direct links to bin Ladin 
and al-Qaida. Following attacks on U.S. forces in Yemen and Somalia, 
foreign terrorists struck the American homeland on February 26, 
1993, setting off a bomb in the underground parking lot at New York 
City’s World Trade Center. The plotters failed in their plan to bring 
the twin towers crashing down, but did kill 6 and wounded more 
than 1,000. Just months later in June, authorities picked up eight 
extremists in the Day of Terror plot to blow up landmarks in New 
York City. But at the time, law enforcement officials failed to grasp the 
full significance of these events. 

Funding for some activities related to homeland security did rise in 
the mid-1990s, spurred by the 1995 bombing of the Alfred P. Murrah 
Federal Building in Oklahoma City, Oklahoma, and the sarin gas 
attack on the Tokyo subway by members of the Japanese Aum 
Shinrikyo cult, who also hated the United States and had considered 
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A Broken 
System 


gasing the Pentagon and White House. Federal expenditures for 
domestic preparedness against weapons of mass destruction (WMD) 
from 1995 to 2000 accelerated from almost nothing to $1.5 billion.” 
Presidential Decision Directive 39, released on June 21, 1995, called 
for giving “the highest priority to developing effective capabilities to 
detect, prevent, defeat and manage the consequences of nuclear, bio- 
logical or chemical (NBC) materials or weapons use by terrorists.”?3 
In 1996 Congress passed the Nunn-Lugar-Domenici Domestic 
Preparedness Initiative, which enhanced the capabilities of first 
responders to deal with WMD. Reflecting a growing concern over ter- 
rorism and WMD, Congress held over 80 hearings on related issues 
between 1998 and 2000.4 

During this period, al-Qaida and its supporters continued their 
attacks abroad, hitting U.S. military facilities and embassies. In 1998, 
bin Ladin pledged to escalate his campaign to drive America from the 
Middle East. While the Clinton administration ultimately launched 
diplomatic initiatives, financial crackdowns, prosecutions, covert 
operations, and even a missile attack against bin Ladin and his fol- 
lowers, U.S. policy responses never reflected the enormity of the 
threat. Built to combat state-sponsored terrorist groups, U.S. govern- 
ment strategies in both the Clinton and early Bush administrations 
were marked by a focus on the threat abroad rather than at home, 
treatment of terrorism as primarily a law enforcement issue, toleration 
of terrorist sanctuaries, competing priorities and limited resources, 
poor information sharing and analysis, and inadequate domestic pre- 
paredness. Military responses were rare and limited, reflecting narrow 
congressional and public support for aggressive and sustained inter- 
national action. Because of this, a highly refined form of political vio- 
lence received room to metastasize largely unchecked. 

In December 1999, Ahmed Ressam was arrested at the U.S.- 
Canadian border with the materials for a bomb he intended to use 
against Los Angeles Airport as part of the al-Qaida-linked global mil- 
lennium terrorist plot. Despite this near miss, there was still little 
appetite for a broad national agenda to address homeland security. 


In 2000 and 2001, despite a variety of leads and warnings, America’s 


homeland security system failed to detect plans for a massive strike 
against the homeland. While the blame for the attack rests squarely 
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with the criminals who conducted it, and their plot was well crafted 
and executed, evidence suggests a more effective system could have 
uncovered and disrupted it. The failure to do so stemmed from a vari- 
ety of systemic problems, including disjointed government strategies, 
balkanized agency responsibilities, an FBI mindset focused on investi- 
gating rather than preventing terrorism, grossly inadequate resources, 
poor technology, a refusal to share information, and just plain sloppy 
work. Civil liberty safeguards put in place decades before had become 
ossified bureaucratic barriers. When a New York FBI agent asked for 
help from criminal agents to track down two al-Qaida operatives (who 
later participated in the 9/11 attacks), he was turned down because of 
the “wall” between intelligence and criminal cases. 

On the morning of September 11, 19 suicide hijackers approached 
their flights. The existing homeland security system still had a chance 
to stop them. In 1996 and ’97, the White House Commission on 
Aviation Safety and Security, headed by Vice President Al Gore and 
known as the “Gore Commission,” had sent recommendations for 
preventing aviation terrorism to the White House. But years later— 
despite repeated government and media investigations documenting 
gaps in aviation security—many of the safeguards recommended by 
the Gore Commission and other experts were still not in place. On 
this morning, nine of the hijackers were selected for special security 
screening, according to a federal spokesperson, but all made it 
through to their flights anyway. 


CHAPTER SUMMARY 


The distinguishing feature of homeland security initiatives that were 
undertaken before September 11 was that investments in homeland 
security were far outpaced by identified requirements and that even 
those identified requirements underestimated the threat. Those 
investments that were made closely adhered to traditional organiza- 
tional responsibilities and missions with only a modicum of innova- 
tion, interagency integration, or synchronization of federal, state, 
local, and private-sector efforts. In many respects, these modest, frag- 
mented efforts followed the traditional American approach of dedi- 
cating only limited resources to domestic security. 


—$— 


Sauter ch01-03 


3/21/05 


2:52 PM Page 19 5 


CHAPTER 1 » HOMELAND SECURITY 19 


In short, despite repeated attacks by al-Qaida against Americans 


abroad, threats by bin Ladin against the homeland, at least two major 
attempts by his followers to attack U.S. targets, a successful poison 
gas attack in Japan by a group with an established hatred of the 
United States, the Oklahoma bombing, and numerous warnings at all 
levels of government, the United States failed to understand and 
respond to the threat of a massive terrorist attack against its territory. 


CHAPTER QUIZ 


. Why did a significant federal role for domestic security, except 


during periods of war, not emerge until the twentieth century? 


. Identify two historical conflicts in which the U.S. government 


used military tribunals to try civilians arrested in the United 
States and why these powers were employed. 


. Explain the relationship between civil liberties and domestic 


security in the American tradition. 


. What was the traditional level of national spending on domestic 


security? What were the exceptions? Why? 


. List factors that may have helped prevent the U.S. government 


from detecting the 9/11 plot. 
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CHAPTER 


THE RISE OF MODERN TERRORISM 


The Road to 9/11 


While terrorism is not new, today’s terrorist threat is different from that 
of the past .. . The new global environment, with its resultant terrorist 
interconnectivity, and WMD are changing the nature of terrorism. 


The (U.S.) National Strategy for Combating Terrorism 


CHAPTER OVERVIEW 


Unprecedented in its destructiveness, the 9/11 attacks heralded the 
arrival of a new type of terrorism. The potential of this menace had been 
foreshadowed by several plots during the previous decade, including 
the 1993 World Trade Center attack, the millennium bombing scheme 
against Los Angeles, and Aum Shinrikyo’s gas attack in Tokyo, as well 
as the cult’s intent toward the United States. While these attacks failed 
to achieve their full objectives and left American complacency essen- 
tially unshaken, they heralded the rise of new terrorist strategies with 
global reach bent on not just influencing political events, but also inflict- 
ing death and destruction on a grand scale. This chapter describes how 
international terrorism evolved and the nature of the threat faced by the 
United States in the wake of the September 11 attacks. 

After the 9/11 strikes, analysts recognized several characteristics of 
this new threat—characteristics that differed dramatically from the 
state-sponsored terrorism that had concerned the United States dur- 
ing the waning years of the Cold War. America now had to plan for 
adversaries that could build well-funded, sophisticated, transna- 
tional organizations free from the strictures of a state sponsorship; 
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able to exploit conditions created by globalization and related politi- 
cal, social, cultural, and economic dislocation; and savvy in the 
twenty-first century technologies that allow terrorists to span the 
globe and threaten mass destruction. 

Along with the devastation wreaked on life and property wrought 
by the September 11 attacks, came a new realization of the serious 
threat posed by the specter of twenty-first century terrorism. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Identify the key characteristics of the twenty-first century 
terrorist organization as represented by al-Qaida. 


2. List major elements of modern technology and commerce used 
by twenty-first century terrorists. 


3. Describe the human and financial costs of the 9/11 attacks. 


4. Discuss the implications of weapons of mass destruction 
(WMD) and mass casualties in twenty-first century terrorism. 


TWENTY-FIRST CENTURY TERRORISM 


Postwar Japan was one of America’s greatest success stories. A suc- 
cessful occupation after World War II led to the rise of a wealthy, 
democratic nation and a staunch ally for the United States. Few in 
the United States paid attention to an obscure Japanese religious cult 
led by a charismatic 40-year-old mystic named Ashara Shoko, even 
though he preached hatred of America and the coming end of the 
world. That changed on March 20, 1995, when memters of Shoko’s 
Aum Shinrikyo cult released enough sarin gas into the Tokyo sub- 
way system to kill 12 commuters and sicken 5,000. The cult failed to 
murder large numbers only because of the poor quality of the chem- 
ical agent employed and mistakes in its dispersal. In the wake of the 
attack, a crackdown by the authorities led to the arrest and convic- 
tion of Ashara and other members of the cult’s leadership, as well as 
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the breakup of their extensive financial network and weapons labo- 
ratories. The official investigation also revealed details of their activ- 
ities, including discussion of chemical attacks in the United States, 
shattering many of the existing preconceptions concerning the 
nature of modern terrorism. Aum Shinrikyo was not sponsored by a 
state. The terrorists did not come from the tents of a third-world 
refugee camp, but from fine, middle-class homes. They did not have 
specific political aims, but a broad, global vision for the future. They 
understood how modern technology could serve as the means for 
achieving their goals. Their ways were not targeted acts of violence, 
but bold attempts at mass death. They were the harbingers of 
twenty-first century terrorism. 


GLOBAL GOALS 


Among earlier generations of terrorists, many groups pursued 
national goals by launching tactical operations to achieve specific 
objectives. For example, Palestinian terrorists of the 1960s and “70s 
demanded the elimination of Israel and used hostage exchanges to 
gain tactical advantages. Communist organizations such as the 
Baader-Meinhof gang, while espousing an international ideology, 
limited most of their actions geographically. They were focused on 
“liberating” their individual nations from capitalism and assisting 
their Palestinian allies in the fight against Israel. 

In contrast, the al-Qaida organization that evolved over the 
course of half a decade before 9/11 reflected many of the charac- 
teristics of the contemporary global terrorist threat. Al-Qaida por- 
trayed itself as the leader in a worldwide battle, promising to attack 
“infidel” governments wherever they opposed the development of 
Islamic theocracies. As will be seen later, the group dedicated itself 
to establishing a global pan-Islamic caliphate, or Muslim theocracy. 
Its goals included expelling U.S. influence and friendly govern- 
ments from Saudi Arabia, Egypt, and other Arab states, along with 
destroying the state of Israel. As part of this strategy, al-Qaida 
sought to crush the will and capability of America and its Western 
allies to resist the emergence of extremist governments. Al-Qaida 
did not claim to represent one breakaway province, country, region, 
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or even economic class. Instead, the group aimed its appeal at the 
world’s more than 1 billion Muslims. While composed primarily of 
Sunni Muslims, al-Qaida also sought to transcend traditional reli- 
gious rivalries by gaining the support of Shiite extremists from 
groups such as Hizballah. 

While earlier groups appealed to such broad motivating forces as 
communism, racism, and pan-Arabism, no traditional terrorist 
group succeeded in creating the unifying call to arms demonstrated 
by al-Qaida. 


A SOPHISTICATED, WORLDWIDE ORGANIZATION 


Unlike many other groups whose international rhetoric far exceeded 
their actual membership, al-Qaida proved able to motivate a diverse 
constituency and mold them into an organizationally and technolog- 
ically advanced force. 


As part of its broad strategy, al-Qaida formed relationships with a 
variety of groups, including Egypt’s Islamic Group and al-Jihad; 
Algeria’s Armed Islamic Group; Pakistan’s Harakat ul-Mujahidin; 
the Islamic Movement of Uzbekistan; Philippine’s Abu Sayyaf; and 
other groups in nations such as Saudi Arabia, Yemen, and 
Bangladesh. In effect, al-Qaida served as an umbrella group or 
“organization of organizations” with affiliated operations in more 
than 60 countries.! 

The 9/11 hijackers themselves came from Saudi Arabia, the 
United Arab Emirates (UAE), Lebanon, and Egypt. Plotters con- 
nected to the operation included French, German, Kuwaiti, and 
Yemeni citizens. Other al-Qaida operations have been linked to citi- 
zens or groups from the United States, the Sudan, Somalia, Eritrea, 
Kenya, Pakistan, Bosnia, Croatia, Algeria, Tunisia, Lebanon, the 
Philippines, Tajikistan, Turkey, Chechnya, Bangladesh, Kashmir, 
Azerbaijan, and Indonesia, among others. At one point, the U.S. 
prison at Guantanamo Bay, Cuba, held prisoners linked to al-Qaida 
from 38 countries.” The movement succeeded in uniting individuals 
from vastly different backgrounds, including citizens of states hos- 
tile to one another. 
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Large Cadre 


Decentralized 
Structure 


Use of Modern 
Technology and 
Exploitation of 
Social Trends 


Some of the most infamous modern terrorist groups, such as the 
Baader Meinhoff gang and Italian Red Brigades, numbered their 
hard-core operatives in the dozens and supporters in the hundreds. 
By some estimates, even the Irish Republican Army fielded fewer 
than 500 gunmen at its peak. Al-Qaida trained up to 20,000 personnel 
in its Afghan camps between 1996 and 2001. Its hard-core operatives 
most likely numbered in the hundreds on 9/11, with thousands of 
trained supporters spread across the globe. 


Al-Qaida decision-making structures were highly developed, as was 
the organization’s tactical execution. The group’s decentralized, 
“flat” administration gave it the capability of planning and executing 
complex operations despite resistance and setbacks. This sort of net- 
worked organization, composed largely of autonomous cells, made 
the organization resistant to “decapitation” by targeted strikes on its 
leadership. Al-Qaida leadership could prompt terrorist violence 
through several types of organizational systems, including centrally 
controlled operations such as 9/11; al-Qaida supported and/or 
financed operations carried out by affiliate groups; and “sponta- 
neous” action by small groups or individuals inspired by the cause 
and often trained at al-Qaida facilities. The last two strategies dra- 
matically increased the number and type of potential attackers, pos- 
ing special difficulties for counterterrorism officials. 


Much as modern multinational corporations dispersed decision mak- 
ing through the use of technology, al-Qaida exploited emerging 
trends and tools. The end of the Cold War dramatically increased the 
ease of international communication, commerce, and travel. As the 
twenty-first century began, more than 140 million people lived out- 
side their country of origins; millions of people crossed international 
borders every day.t Among them were numerous al-Qaida support- 
ers, conversant in the languages and cloaked in the citizenships of the 
very societies they hated. 

Moving freely through this ever more open and integrated inter- 
national structure, al-Qaida operatives maintained communication 
via new technologies such as cell and satellite phones, encrypted e- 
mail, chat rooms, videotape, and CD-ROMs. This allowed them to 
disperse their leadership, training, and logistics not just across a 
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region, but around the globe. Operating from safety in Afghanistan, 
the group’s leaders were able to support operations in dozens of 
nations. 


Al-Qaida established an international network of businesses, criminal 
enterprises, and charities to support its operations. From heroin 
smuggling to leather tanning, al-Qaida ventures generated significant 
revenue and supported an estimated $30 million annual budget 
which was distributed via formal and informal transfer systems.° 


While al-Qaida prospered during in its Sudanese and Afghan sanctu- 
aries, it was not dependent on those states in the same manner as 
many terrorist groups during the 1970s and ‘80s. Indeed, the Taliban 
government of Afghanistan relied on al-Qaida for capital and military 
power, discouraging it from cracking down on the group as 
demanded by the United States. It has been said the Taliban govern- 
ment was in some ways a “terrorist-sponsored state.” 

Al-Qaida and other groups also sought out operational bases in 
other countries in the Americas, Africa, Asia, the Middle East, and 
Europe. In some cases, these countries could not stop them because 
of weak central governments or war. In others, such as Europe and 
even the United States, lax security measures and respect for civil lib- 
erties combined to provide the terrorists with operational latitude. 


Whether concocted in Sudanese safe houses, Afghan training 
camps, or even American apartment buildings, al-Qaida operations 
have been marked by careful and expert planning and execution. In 
addition, these terrorists not only understood the culture of their 
enemies, but were able to employ America’s technology against 
itself. 

Al-Qaida attacks have involved years of planning. The 1998 bomb- 
ings of U.S. embassies in Africa were being plotted as early as 1993.” 
The 9/11 attacks began taking shape in the mid-1990s. At heart, the 
plot reflected a disturbing ingenuity, sharply contrasting with the 
standard terrorist tactics of earlier decades. The ability of the group to 
envision and plan the details of such an intricate operation, with its 
extensive recruiting and operational support requirements, demon- 
strated a new level of terrorist capability. 
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ISSUES: 


THE LAX BOMBER—THE SHAPE OF THINGS TO COME? 


On a chilly December afternoon shortly before the year 2000 mil- 
lennium celebrations, a green Chrysler sedan rolled off the ferry 
sailing from Canada’s Vancouver Island to Port Angeles, 
Washington, in the United States. When the customs agent 
Diana Dean handed the driver a customs declaration form, she 
noticed the driver seemed nervous and fidgety. 


Text of Interview by Customs Inspector Diana Dean 


“Where are you going?” 

“Sattal.” 

“Why are you going to Seattle?” 
“Visit.” 

“Where do you live?” 

“Montreal.” 

“Who are you going to see in Seattle?” 
“No, hotel.” 


After further questioning, the car was searched; its trunk was 
packed with about 40 kilograms of explosives and detonators. The 
name on the driver's license was Benni Antoine Noris, but his real 
name was Ahmed Ressam a young, middle-class Algerian with a 
passion for soccer and experience in Afghan terrorist camps. 
Ressam confessed to U.S. authorities that the explosives were for a 
terrorist operation against Los Angeles International Airport 
(LAX), an operation he had been planning in Canada for several 
months. He said he chose LAX “because an airport is sensitive 
politically and economically” and the United States was “the 
biggest enemy” of Islam. Ressam said he had conceived the idea 
himself, and that while al-Qaida knew about the plot and supplied 
some support, it was his operation. Little more than $3,000 
Canadian dollars and a fake driver’s license had been required to 
prepare his attack. 

While an alert customs agent foiled the millennium bomb 
plot, all the elements required to replicate this form of attack are 
achievable by any individual or terrorist group. 
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1. Does the LAX bomber fit the profile of twenty-first century 
terrorism? 

2. How were the LAX bomber operations different from the 
9/11 attacks? How were the operations similar? 

3. Will future attacks be more like that of the LAX bomber or 
the 9/11 hijackers? 


4. What lessons should have been drawn from the millenium 
bomb plot? 


Strategic Goals 


While obscure to many Westerners, al-Qaida’s strategy was based 
upon a complex historical, cultural, geopolitical, and religious frame- 
work. Strongly influenced by the successful battle against the Soviet 
occupation of Afghanistan; al-Qaida strategy depicted the United 
States as a weaker adversary than the ruthless Soviet Union. Bin 
Ladin himself described the strategic results of the 9/11 attacks as 
demoralizing the United States, causing the U.S. government to 
restrict civil liberties, and—perhaps most importantly—galvanizing 
Muslims around the world and forcing them to choose sides. “Our 
goal is for our (world Islamic) nation to unite in the face of the 
Christian crusade,” bin Ladin said after the attacks.® 


Tight Operational Security 


Contrary to some claims, the infiltration of the 9/11 hijackers into the 
United States and their operations in America were not perfect. For 
example, most of the conspirators made obvious errors in their visa 
applications and once in America some of them associated with indi- 
viduals under scrutiny by the FBI. But in general the plot reflected 
strong security and no doubt factored in the U.S. government's lim- 
ited domestic intelligence capabilities. 

Most of the hijackers did not have terrorist records, helping them 
escape the attention of U.S. intelligence.’ Fifteen of the men were from 
Saudi Arabia, whose citizens faced relatively little scrutiny from the 
U.S. visa officials. They got passports and visas under their real names, 
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and then entered the United States from different locations at different 
times. In accordance with the al-Qaida manual, the men shunned the 
facial hair and garb of traditional Muslims. They were familiar with 
Western culture and able to navigate American society. They clearly 
attempted to keep a low profile, shopping at Wal-Mart and eating at 
places such as Pizza Hut. According to the CIA, the hijackers avoided 
laptops in favor of public Internet connections and used at least 133 
different prepaid calling cards on a variety of phones. 

Based on statements by bin Ladin and other information, while the 
hijackers knew they were participating in a “martyrdom’”—or sui- 
cide—operation, many did not know details of the mission or its tar- 
gets until it was well under way.!° In the vocabulary of intelligence, 
the plot was “tightly compartmented” and difficult to penetrate. 


Effective Execution 


Al-Qaida also proved skilled at managing operations. When Flight 77 
hijackers Nawaf al-Hazmi and Khalid al-Mihdhar proved to be terri- 
ble flight students, Hani Hanjur arrived back in the United States. 
Suspected plotters Ramzi bin al-Shibh and Zakaria Essabar couldn’t 
get into the United States, but the plot went on. Muhammad Atta, 
who piloted the first plane into the World Trade Center, had visa 
problems when trying to reenter the United States in January 2001 
and was caught driving without a license, but managed to avoid 
drawing the attention of authorities. Other hijackers escaped detec- 
tion during traffic stops. Even when Zacarias Moussaoui was arrested 
in August 2001 by FBI agents who considered him a possible suicide 
hijacker, the plan was not derailed. Days after the arrest, the plotters 
began buying their tickets. And on the morning of 9/11, many of their 
plotters and their weapons made it through last-minute security 
screenings. The ability of the terrorists to seize four aircraft and suc- 
cessfully guide three of them into their targets reflected superb plan- 
ning, significant skill, and superior tactical execution. 


EFFECTS OF TWENTY-FIRST CENTURY TERRORISM 


The 2001 attacks certainly qualify as one of the worst crimes in 
human history. Even considered in military terms, the human and 
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financial destruction of 9/11 mark them as among the world’s most 
devastating attacks. While other uses of force have claimed more 
lives, few have combined such terrible human losses with the mas- 
sive economic damage of 9/11, impacts that were magnified by the 
anthrax attacks that occurred later in 2001. 


The human cost of 9/11 can be measured in both physical and psy- 
chological terms. By either calculation, the attacks exacted a terrible 
price on the United States. 


Life and Limb 


Nearly 3,000 people were killed by the attack, many dying after 
excruciating physical and psychological ordeals. For those without 
personal connection to these losses, the scope of the suffering can 
only be grasped fleetingly, perhaps in the awful images of people 
choosing to leap hundreds of feet to their deaths from the World 
Trade Center rather than face the conflagration, or the haunting final 
phone calls from passengers on the hijacked aircraft. The physical 
pain of 9/11 will continue for decades among those hurt in the 
attacks. An untold number of victims, estimated in the thousands, 
suffered injuries that day and in the ensuing rescue and cleanup oper- 
ations, some sustaining burns or other wounds that damaged them 
for life. In a reflection of the same trends exploited by the terrorists, 
many of those harmed on 9/11 were born abroad; the attack killed 
people from some 80 nations, including a significant number from 
predominantly Muslim countries." 


Psychological 


As discussed earlier, terrorism involves attacks on one set of victims 
to instill fear in another. Judged this way, the 9/11 attacks set a terri- 
ble new standard. Up to 10 million U.S. adults knew someone who 
had been killed or injured in the attacks. Almost every American, and 
vast numbers of other people around the globe, experienced the 
attacks through a suffocating flow of media reports. Research indi- 
cated that many millions of Americans outside New York City and 
Washington, DC, experienced negative psychological symptoms such 
as nightmares, flashbacks, and other anxiety symptoms linked to 
posttraumatic stress disorder (PTSD) from September 11.1? A study 
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Financial 


showing increased use of cigarettes, alcohol, and marijuana by 
Manhattan residents after 9/11 raised concerns about yet another 
type of damage to public health from the attack.!° 

The September 11 Fund, a charity, reported providing cash and 
services to 100,000 victims, including relatives of those killed, people 
wounded in the attack, and those who lost employment or housing 
because of 9/11. By one estimate, 6,000 New Yorkers were displaced 
from their residences in lower Manhattan. While most were able to 
return home in the weeks after the attacks, their neighborhood had 
been transformed from a bustling economic center to a devastated 
graveyard smothered in the acrid dust of crushed concrete and incin- 
erated human remains. 


The 9/11 attacks were intended to damage America’s government, 
military, and economy. They achieved their greatest success with the 
last. “Those that were there (in the World Trade Center) are men that 
supported the biggest economic power in the world,” said bin Ladin 
after the attacks.'* He later exhorted his followers: “Never be afraid 
of their (the U.S.) multitudes, for their hearts are empty while their 
strength has begun to weaken—amilitarily and economically. This was 
particularly true after the blessed day of New York, by the grace of 
Allah, when their losses reached more than one trillion dollars, fol- 
lowing the attack and its aftermath . . . Praise be to Allah.” Bin Ladin 
grossly exaggerated the impact of his work. But while the economic 
damage caused by 9/11 was not enough to cause fundamental harm 
to the U.S. economy, it did significant financial injury to many loca- 
tions, sectors, corporations, and individuals. 


Short-Term Costs 


The most obvious financial costs of the attacks were in the people 
killed and injured and the buildings, infrastructure, airplanes, and 
other assets destroyed and damaged on 9/11. Those costs have been 
estimated at $25 to $60 billion in life and property losses, with imme- 
diate insurance costs in the $36 billion to $54 billion range.!© These 
immediate, direct losses combined with short-term lost economic out- 
put and other damage in the hours and days after the attack. 
Economic aftershocks rippled through the economy as buildings 
were evacuated, flights were cancelled, and stock trading halted. 
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Consumers reduced their spending, and investors decreased their tol- 
erance for risk. Companies in the airline, aerospace, travel, tourism, 
insurance, lodging, restaurant, and recreation sectors reported drops 
in demand. During 2001 and 2002, more than 145,000 workers in 34 
states lost their jobs for reasons directly or indirectly linked to 9/11, 
according to a report by the U.S. Bureau of Labor Statistics. Many 
were from the airline and hotel industries. Because the report counted 
only certain types of layoffs, the actual number of job losses was 
almost certainly higher.! 


Long-Term Costs and the “Terrorism Tax” 


The long-term costs of the attack include everything from the impact 
of loans granted to airlines by the U.S. government to the so-called 
terrorism tax, which describes increased costs for security. These 
expenditures include government spending on increased national 
defense, new homeland security programs, corporate security 
expenses, travel delays, higher insurance costs, increased red tape, 
higher shipping costs, increased expenses from immigration restric- 
tions, slower mail, disaster planning, and backup sites for business 
and government organizations. For example, additional airline secu- 
rity has cost $11 billion by one estimate.'® 

Other costs, while harder to calculate, are clearly significant—a 
group of U.S. business organizations estimated that problems with the 
visa system for foreign business travelers coming to the United States 
cost more than $30 billion from 2002 to 2004 in lost sales, extra 
expenses, relocation costs, and other losses.'? The total terrorism tax is 
certainly many billions of dollars a year on an ongoing basis. 
Economists assume that such spending diverts investment from more 
financially productive areas, depressing growth. On the other hand, it 
can also be argued that good counterterrorism measures can promote 
growth, protecting activities from disruptions and instilling consumer 
and custumer confidence. Additionally, some security measures may 
have economic benefits such as improving the efficiency and manage- 
ment of supply chains. In short, while there is a general consensus that 
security has a significant influence on the economy, the long-term pos- 
itive and negative impacts of the terrorist tax remain to be seen. 

The impact of the 9/11 attacks on the U.S. economy are a case in 
point. While estimates vary widely, in total the economy of New York 
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City alone lost $83 billion due to the attacks, while total damage to the 
United States easily exceeded $100 billion.” Strictly speaking, and as 
evaluated by such measures as percentage of gross domestic product, 
this loss did not produce a fundamental impact on the U.S. economy, 
which began recovering from a recession not long after the attacks. 
However, it did create a substantial hardship for many Americans. 


HIGHLY EFFICIENT ATTACK 


In the terrible calculus of combat, opponents must weigh the costs of 
their campaigns against the damage they will inflict on the enemy. 
Viewed in this way, al-Qaida proved highly efficient, at least when 
considered solely in relation to the direct impact of 9/11 on the attack- 
ers and victims. Al-Qaida’s direct expenditures on the 9/11 attacks 
were between $400,000 to $500,000.?! For that amount, plus the loss of 
19 trained operatives, the terrorists killed some 3,000 Americans and 
caused more than $100 billion in economic damages. 


THREAT OF WEAPONS OF MASS DESTRUCTION 


Perhaps the most fundamental lesson of 9/11 was that America’s ene- 
mies had both the motive and means to cause mass casualties in the 
United States. While this seems obvious in retrospect, preventing 
such an attack was never a driving priority of the U.S. government 
prior to 2001. 

While the 9/11 attacks involved the instruments of the everyday 
world, the interest of terrorists in wrecking widespread havoc 
prompted greater concerns over the potential use of weapons of mass 
destruction (WMD). These are nuclear, chemical, biological, radiolog- 
ical, and highly explosive weapons capable of inflicting mass casual- 
ties and destruction. 

Certainly al-Qaida leaders have not hidden their desire to obtain 
nuclear, biological, or chemical weapons. “Acquiring weapons for the 
defense of Muslims is a religious duty,” according to Usama bin 
Ladin. “If I have indeed acquired these weapons, then I thank God for 
enabling me to do so. And if I seek to acquire these weapons, I am 
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carrying out a duty. It would be a sin for Muslims not to try to pos- 
sess the weapons that would prevent the infidels from inflicting harm 
on Muslims.” ?”? 


FROM THE SOURCE: 
THE ANTHRAX LETTERS—A SIGN OF THE TIMES? 


A week after the airplane strikes of 9/11, another threat few 
expected shocked Americans. Letters containing anthrax bacte- 
ria were mailed from Trenton, New Jersey, to the offices of NBC 
and The Post in New York City, and probably the National 
Enquirer in Miami, Florida, on September 18, 2001. On October 
9, 2001, letters were mailed to Senate offices in Washington, DC. 
In addition to people being exposed where the letters were 
opened, postal workers in Trenton and Washington, as well as a 
woman in Connecticut, contracted inhalation anthrax from 
spores that leaked from the letters. 


Text of Letter Sent to Senator Tom Daschle on October 9, 2001 


09-11-01 

YOU CAN NOT STOP US. 
WE HAVE THIS ANTHRAX. 
YOU DIE NOW. 

ARE YOU AFRAID? 
DEATH TO AMERICA. 
DEATH TO ISRAEL. 
ALLAH IS GREAT. 


Overall, infections from the anthrax letters killed 5 and sick- 
ened 13 others and focused attention on a class of weapons that 
represent a dangerous and growing threat. 

While the letters caused death and injury to only a handful of 
Americans, they disrupted the lives of millions. Perhaps more 
troubling than the attacks themselves were the miscues, faulty 
assumptions, poorly coordinated response, and media frenzy 
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following in their wake, as well as a halting law enforcement 
investigation that three years after the act had still failed to iden- 
tify the culprit behind the anthrax letters. The attack served as an 
object lesson in why mass destruction may have a strong appeal 
to the practitioners of twenty-first century terrorism. 


In part, U.S. policy had accounted for these threats by focusing on 
preventing the spread of WMD. But just as global trends had facili- 
tated the 9/11 attack, they also increased the risk that terrorists could 
acquire WMD. Among other factors were an increased availability of 
critical technologies and experts; the greater ease of international 
transportation; and the spread of knowledge through the Internet and 
other media. Ironically, U.S. assistance to Pakistan and the 
Mujahadeen during the Soviet occupation of Afghanistan, and the 
Soviet collapse that was hastened by that assistance, may have indi- 
rectly facilitated the flow of WMD technology and expertise. 
Scientists and stockpiles from the former Soviet Union were opened 
to exploitation. At the same time Pakistan was cooperating with the 
United States against the Soviets, its experts were developing and 
proliferating nuclear technology. By 2003, the U.S. government 
warned: “Presently, al Qa’ida and associated groups possess at least a 
crude capability to use chemical, biological, and radiological agents 
and devices in their attacks.””° 


CHAPTER SUMMARY 


The 9/11 attacks revealed a fundamental truth to America. No longer 
could reasonable people deny the need to prepare for enemies— 
whether al-Qaida and other large terrorist organizations, or smaller 
groups and individuals—capable of devising and executing sophisti- 
cated strategies to unleash weapons of mass destruction against the 
U.S. homeland. As horrendous as 9/11’s destruction proved, it was 
clear that an even more devastating attack was possible in the future. 
This finally provided the stimulus to overhaul America’s homeland 
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security policies, prompting far more aggressive measures to protect 
its citizens and allies. Literally within hours of the attack, American 
policy makers began planning sweeping reforms, major investments, 
and global operations. The private sector and citizenry also began to 
change their behaviors. The results would produce fundamental 
changes at all levels of American society. 


CHAPTER QUIZ 


1. What are three characteristics of al-Qaida’s twenty-first century 
terrorist organization? Why are they significant? 


2. Identify two types of modern technology used by twenty-first 
century terrorists. Explain why they might be important terrorist 
tools. 


3. What were the consequences of the 9/11 attack? 


4. Why might terrorists be more likely to employ weapons of mass 
destruction in the future? 
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CHAPTER 


THE BIRTH OF MODERN 
HOMELAND SECURITY 


The National Response 
to the 9/11 Attacks 


America is no longer protected by vast oceans. We are protected from attack 
only by vigorous action abroad, and increased vigilance at home. 


President George W. Bush, Jan. 29, 2002 


CHAPTER OVERVIEW 


Every sector of American society was changed by the 9/11 attacks on 
the United States and the offensive and defensive U.S. government 
strategies created to meet future threats. Many of the initiatives, in 
both the public and private sectors, challenged traditional 
approaches taken by the United States to ensure domestic security. 
These changes featured aggressive new U.S. foreign and military 
policies and efforts to cooperate with other countries in the war on 
terror. On the home front, they included reforming the intelligence 
community, refocusing the FBI and other federal agencies, enacting 
sweeping legislation to strengthen law enforcement, and concluding 
the most far-reaching reorganization of the federal government in 
more than 50 years. These vast changes also extended to state and 
local governments and the private sector. In the end, the changes 
driven by 9/11 have provided the foundation for a modern system of 
homeland security. 
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PART 1 * HOW WE GOT HERE FROM THERE 
CHAPTER LEARNING OBJECTIVES 


1. Describe the Bush Doctrine and its implications for U.S. for- 
eign policy. 

2. Explain how the federal government was reorganized to focus 
on homeland security. 


3. Describe the major tenets of the national homeland security 
strategy. 


4. Define the changes in the U.S. approach to domestic counter- 
terrorism after 9/11. 


5. Identify the major homeland security challenges faced by state 
and local governments and the private sector. 


THE RESPONSE TO 
TWENTY-FIRST CENTURY TERRORISM 


As exhausted rescue workers dug through the smoking remains of 
the World Trade Center and a large American flag billowed over the 
hole torn in the Pentagon’s side, the Bush administration mapped out 
its response to twenty-first century terrorism.’ Some of the early steps 
were defensive: continuing the grounding of civilian aircraft; closing 
key government offices and monuments; providing fighter jet cover 
over major cities; and launching a dragnet for “special interest” aliens 
and others suspected of terrorist links. But the first major strategic 
change centered on taking the battle to the enemy by invading 
Afghanistan and crippling foreign terrorist organizations with inter- 
national ties. 


TAKING THE OFFENSIVE 


The president announced an unprecedented offensive against 
global terrorism in a speech to Congress on September 20, 2001. The 
speech singled out three global threats that required a concerted 
response: terrorist organizations with global reach, weak states that 
harbored transnational terrorist groups, and “rogue” states that 
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Preemption 


might aid terrorists or undertake terrorist acts themselves. During 
the speech, President George W. Bush declared, “Every nation in 
every region now has a decision to make. Either you are with us, or 
you are with the terrorists.” In his speech the president added that, 
“From this day forward, any nation that continues to harbor or sup- 
port terrorism will be regarded by the United States as a hostile 
regime.” The declarations in this speech are commonly referred to 
as the Bush Doctrine.? 


The avowal that nations supporting terrorism were to be considered 
hostile regimes was significant in light of the U.S. National Security 
Strategy published by the administration the following September. 
The strategy is a document required by law that outlines the overall 
ends, ways, and means of ensuring national security. The 2002 strat- 
egy reaffirmed the nation’s right of preemption, which allows coun- 
tries to defend themselves against an imminent threat before they 
are attacked. The strategy broadly interpreted the United States’ 
right to forestall or prevent terrorist acts, particularly where the 
threat of weapons of mass destruction might be involved.’ 


Opposition to the Bush Doctrine 


The Bush Doctrine proved highly controversial, particularly as its 
tenets were put into practice. There were two main objections to 
declaring war on terrorism. First, as discussed earlier, there is no 
universal definition of terrorism, and thus no clear enemy. Second, 
combating terrorists, whoever they are, is not primarily a military 
operation, but a matter of law enforcement and social, cultural, and 
economic conflict. It is not “traditional” war, as one U.S. defense 
analyst declared, in the sense understood by military professionals. 
Wars, he argues, are supposed to have “clear beginnings and ends 
... [and] clear standards for measuring success in the form of ter- 
ritory gained and enemy forces destroyed.”* In short, critics of the 
Bush Doctrine declared the global war on terrorism was inappro- 
priate because its goals were open-ended, unbounded, and 
unlikely to achieve decisive results. At the same time, they sug- 
gested many around the world would interpret U.S. efforts as 
“empire building,” efforts to expand American power rather than 
enhance global security. 


—P— 


Sauter ch01-03 


44 


3/21/05 


2:52 PM Page 44 $ 


PART 1 ¢ HOW WE GOT HERE FROM THERE 


Support for the Bush Doctrine 


In contrast, proponents of the president’s strategy concluded the United 
States had few practical alternatives. U.S. counterterrorism efforts had 
been insufficient to stem the growth of transnational terrorist networks 
and al-Qaida had publicly committed itself to the destruction of the 
United States.” In addition, they argued the means used to defend the 
nation during the Cold War would be inadequate to deal with the secu- 
rity threats of the twenty-first century. Cold War strategy relied on 
deterrence (the threat of nuclear war) and containment, the use of mili- 
tary, political, diplomatic, and economic power to limit the spread of 
communism. It would be difficult to apply deterrence and containment 
as practiced against the Soviet Union to disparate transnational groups 
and determined rogue states.° The only solution was to go after the ter- 
rorists, while remaining prepared to thwart or respond to the attack that 
would inevitably ensue. This included plans to eliminate the political 
breeding grounds of terrorists in the Middle East, which President Bush 
later called the “forward strategy of freedom,” a doctrine that would 
grow to include the liberation of Iraq. 

On October 7, 2001, following repeated refusals by the Taliban rulers 
of Afghanistan to expel bin Ladin, the United States and an antiterror- 
ist coalition of countries began military operations to root out both the 
Taliban and al-Qaida. Under attack by U.S. airpower and anti-Taliban 
ground forces, organized opposition disintegrated rapidly, and Kabul, 
the Afghan capital, fell on November 13, 2001. Many key senior Taliban 
and al-Qaida leaders, including bin Ladin, escaped capture. Forces 
from the new Afghanistan government, as well as the U.S. military, and 
troops in neighboring Pakistan continue to pursue elements of the 
Taliban and al-Qaida in the region.’ 


ISSUE: 
THE BUSH ADMINISTRATION ON PREEMPTION 


Excerpt from the 2002 National Security Strategy 


While the right of preemption is well-established in interna- 
tional law, the United States has never included a statement in its 
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national security strategy that explicitly addressed the issue 
before the 9/11 attacks. The 2002 National Security Strategy, 
released in the wake of September 11, contained explicit lan- 
guage on the subject. 


For centuries, international law recognized that nations need 
not suffer an attack before they can lawfully take action to 
defend themselves against forces that present an imminent 
danger of attack. Legal scholars and international jurists 
often conditioned the legitimacy of preemption on the exis- 
tence of an imminent threat—most often a visible mobiliza- 
tion of armies, navies, and air forces preparing to attack. 

We must adapt the concept of imminent threat to the 
capabilities and objectives of today’s adversaries. Rogue 
states and terrorists do not seek to attack us using conven- 
tional means. They know such attacks would fail. Instead, 
they rely on acts of terror and, potentially, the use of 
weapons of mass destruction—weapons that can be easily 
concealed, delivered covertly, and used without warning. 

The targets of these attacks are our military forces and 
our civilian population, in direct violation of one of the 
principal norms of the law of warfare. As was demon- 
strated by the losses on September 11, 2001, mass civilian 
casualties is the specific objective of terrorists and these 
losses would be exponentially more severe if terrorists 
acquired and used weapons of mass destruction. 

The United States has long maintained the option of 
preemptive actions to counter a sufficient threat to our 
national security. The greater the threat, the greater is the 
risk of inaction—and the more compelling the case for tak- 
ing anticipatory action to defend ourselves, even if uncer- 
tainty remains as to the time and place of the enemy’s attack. 
To forestall or prevent such hostile acts by our adversaries, 
the United States will, if necessary, act preemptively. 

The United States will not use force in all cases to pre- 
empt emerging threats, nor should nations use preemption 
as a pretext for aggression. Yet in an age where the enemies 
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of civilization openly and actively seek the world’s most 
destructive technologies, the United States cannot remain 
idle while dangers gather. We will always proceed deliber- 
ately, weighing the consequences of our actions. To support 
preemptive options, we will: 


e build better, more integrated intelligence capabilities 
to provide timely, accurate information on threats, 
wherever they may emerge; 


e coordinate closely with allies to form a common 
assessment of the most dangerous threats; and 


e continue to transform our military forces to ensure 
our ability to conduct rapid and precise operations 
to achieve decisive results. 


The purpose of our actions will always be to eliminate 
a specific threat to the United States or our allies and 
friends. The reasons for our actions will be clear, the force 
measured, and the cause just. 


1. What are the grounds for preemptive action, and what are 
the limitations in practicing preemption? 


2. Is the concept of preemption expressed in the strategy con- 
sistent with how the United States has used force in the 
past, or is this something new? 

3. How do allies and enemies interpret the preemption dec- 
laration? 


4. Does preemption increase national and homeland security? 


INTERNATIONAL COOPERATION 


While U.S. military power proved instrumental in dismantling ter- 
rorist sanctuaries, American combat operations alone were insuffi- 
cient to take the offensive in the war on terror. The United States also 
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required international cooperation both to pursue terrorists and 
enhance homeland security. Effective cooperation also had to expand 
beyond military means, including areas such as covert operations, 
intelligence sharing, law enforcement, and trade and travel security. 
After 9/11, over 100 nations offered the United States some form of 
assistance or support, perhaps most prominently America’s tradi- 
tional military ally Great Britain. The United States discovered that 
in the war against global terrorism a class of states that could be 
termed the “new allies” was also vital. These were states that had 
ambivalent relations with the United States in the past, but now 
found themselves in a situation where their internal security con- 
cerns and regional objectives coincided with U.S. interests in pursu- 
ing global terrorism. They provided basing and overflight rights, 
intelligence sharing, and counterterrorism support for attacking al- 
Qaida sanctuaries overseas. In Asia, the rapidly expanding joint 
effort by the United States and Kazakhstan offered one example of a 
new alliance at work.’ 

Support also came from organizations such as the North Atlantic 
Treaty Organization (NATO), originally formed to defend the West 
against the Soviet Union, and America’s only multinational military 
alliance of major consequence. After the attacks of September 11, the 
Alliance invoked Article 5 of its charter (the provision for collective 
self-defense) for the first time in its history. This was a powerful 
statement of solidarity and a positive sign for future cooperation. 
NATO also provided assistance in postwar Afghanistan. On 
September 28, 2001, the United Nations Security Council adopted 
Resolution 1373 which called for criminalizing terrorist activities, 
denying funds and safe havens, and establishing a committee to 
monitor implementation.? Other international organizations also 
had a part to play, including the European Union (EU), Organization 
for Security and Cooperation in Europe (as the only pan-European 
body), the Association of Southeast Asian Nations, and the Asia 
Pacific Economic Cooperation Forum. The United States and the EU, 
for example, enacted new joint measures to freeze terrorist assets 
and share intelligence. Additionally, a long list of organizations, such 
as Interpol, contributed to combating transnational threats. 
Nongovernmental organizations (NGOs) also assumed important 
functions in homeland security and counterterrorism. For example, 
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after 9/11 the International Maritime Organization set stricter stan- 
dards for the security of ports and international shipping. 
Nevertheless, harmonizing the efforts of these organizations with 
U.S. security remained a complicated process. In some cases, NGO 
activities actually proved detrimental and were even accused of 
being fronts for transnational crime and terrorist activities. The char- 
itable group, the Holy Land Foundation, for example, is alleged to 
have funneled over $150 million to the terrorist group Hamas. 

Cooperation between the United States and other countries, multi- 
national organizations, and nongovernment groups took many 
forms, from public diplomacy to covert operations. One important 
avenue of international cooperation was a crackdown on monetary 
instruments used to finance terrorist attacks, such as the hawala, a 
short-term, discountable, negotiable promissory note or bill of 
exchange used widely in the Islamic world. While not limited to 
Muslim countries, the hawala has come to be identified with Islamic 
banking. It was alleged that billions of dollars were transferred 
through these exchanges and that some hawala dealers had ties to 
terrorists.'° After 9/11, a concerted effort to combat money launder- 
ing, including the use of the hawala, was directed at terrorist finan- 
cial networks. In the year after 9/11, the White House reported that 
$113.5 million in terrorist assets had been frozen worldwide: $35.3 
million in the United States and $78.2 million overseas." 


DEFENSIVE EFFORTS 


On the home front, the Bush administration set out to enhance inter- 
agency and intergovernmental cooperation, which had been lacking 
prior to 9/11. These goals were pursued by new legal initiatives; cre- 
ation of the White House Office of Homeland Security; the drafting of 
a national homeland security strategy; plans to create a separate 
regional military command for the defense of North America; and a 
proposal for a federal Homeland Security Department. Improving 
airline safety and heightening security awareness for other critical 
infrastructure systems were also focal points. For example, the gov- 
ernment recruited, trained, and deployed 45,000 federal security 
screeners to airports across the nation. At the same time, the anthrax 
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The PATRIOT Act 
and Other 
Congressional 
Initiatives 


Reorganization 
in the White 
House 


attacks of fall 2001 galvanized support for increased defensive meas- 
ures against WMD. 


In response to the September 11 attack, Congress passed a number of 
significant pieces of legislation. The Aviation and Transportation 
Security Act established a federal agency to supervise security of com- 
mercial aviation. The Maritime Transportation Security Act generated 
new requirements for the security of ports and shipping. The Enhanced 
Border Security and Visa Entry Reform Act significantly expanded the 
information to be collected on visitors to the United States. The Public 
Health Security and Bioterrorism Preparedness and Response Act man- 
dated additional measures for protecting the food and drug supply. 

Perhaps the most significant and controversial of the new laws 
passed by Congress was the Uniting and Strengthening America by 
Providing Appropriate Tools Required to Intercept and Obstruct 
Terrorism (USA PATRIOT) Act. The Act created new crimes, new 
penalties, and new procedural efficiencies for use against domestic 
and international terrorists. Although it was not without safeguards, 
critics contended some of its provisions went too far. Although it 
granted many of the enhancements sought by the Department of 
Justice, others are concerned that it did not go far enough. 

The PATRIOT Act did serve to improve U.S. counterterrorism in 
four critical areas. First, it promoted the sharing of information 
between intelligence and law enforcement investigations—tearing 
down the “wall” that hampered investigations before 9/11. Second, 
the Act authorized additional law enforcement tools for pursuing 
terrorists, tools that were already available for investigating other 
serious crimes, such as drug smuggling. Third, it facilitated surveil- 
lance of terrorists using new technologies like cell phones and the 
Internet. Fourth, the Act provided for judicial and congressional 
oversight of the new authorities granted in the legislation. 1? 


One of the first initiatives in the executive branch was the establish- 
ment of an Office of Homeland Security within the Executive Office 
of the President in October 2001. Headed by the Assistant to the 
President for Homeland Security, former Pennsylvania Governor 
Tom Ridge, the mission of the office was to develop and coordinate 
the implementation of a comprehensive national homeland security 
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FROM THE SOURCE: 


EXCERPT FROM THE USA PATRIOT ACT 


The USA PATRIOT Act contains over 800 sections, many of 
which are not controversial and have little to do with civil liberty 
issues. Among the most important provisions of the law were 
initiatives to remove the “wall” between law enforcement and 
intelligence efforts to share information. 


Section 203. Authority to Share Criminal Investigative Information 


(a) AUTHORITY TO SHARE GRAND JURY INFORMA- 
TION- 


(1) IN GENERAL- Rule 6(e)(3)(C) of the Federal Rules of 
Criminal Procedure is amended to read as follows: 


`(C)(i) Disclosure otherwise prohibited by this rule of mat- 
ters occurring before the grand jury may also be made— 


~(I) when so directed by a court preliminarily to or in con- 
nection with a judicial proceeding; 


(II) when permitted by a court at the request of the defen- 
dant, upon a showing that grounds may exist for a motion 
to dismiss the indictment because of matters occurring 
before the grand jury; 


“(ID) when the disclosure is made by an attorney for the 
government to another Federal grand jury; 


“(IV) when permitted by a court at the request of an attor- 
ney for the government, upon a showing that such matters 
may disclose a violation of state criminal law, to an appro- 
priate official of a state or subdivision of a state for the pur- 
pose of enforcing such law; or 


*(V) when the matters involve foreign intelligence or coun- 
terintelligence (as defined in section 3 of the National 
Security Act of 1947 (50 U.S.C. 401a)), or foreign intelligence 
information (as defined in clause (iv) of this subparagraph), 
to any Federal law enforcement, intelligence, protective, 
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immigration, national defense, or national security official 
in order to assist the official receiving that information in 
the performance of his official duties. 


~(ii) If the court orders disclosure of matters occurring before 
the grand jury, the disclosure shall be made in such manner, 
at such time, and under such conditions as the court may 
direct. 


`(iii) Any Federal official to whom information is disclosed 
pursuant to clause (i)(V) of this subparagraph may use that 
information only as necessary in the conduct of that person’s 
official duties subject to any limitations on the unauthorized 
disclosure of such information. Within a reasonable time after 
such disclosure, an attorney for the government shall file 
under seal a notice with the court stating the fact that such 
information was disclosed and the departments, agencies, or 
entities to which the disclosure was made. 


*(iv) In clause (i)(V) of this subparagraph, the term ‘foreign 
intelligence information’ means— 


(I) information, whether or not concerning a United States 
person, that relates to the ability of the United States to pro- 
tect against— 

*(aa) actual or potential attack or other grave hostile acts of 
a foreign power or an agent of a foreign power; 

*(bb) sabotage or international terrorism by a foreign power 
or an agent of a foreign power; or 

(cc) clandestine intelligence activities by an intelligence 
service or network of a foreign power or by an agent of for- 
eign power; or 

*(II) information, whether or not concerning a United States 
person, with respect to a foreign power or foreign territory 
that relates to— 


(aa) the national defense or the security of the United 
States; or 


*(bb) the conduct of the foreign affairs of the United States. 
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strategy to secure the United States from terrorist threats. The presi- 
dential executive order which established the office also created the 
Homeland Security Council of cabinet- and subcabinet-level officers 
to coordinate federal activities. 


The National Strategy for Homeland Security 


The Office of Homeland Security released its national strategy in July 
2002, defining homeland security as “a concerted national effort to 
prevent terrorist attacks within the United States, reduce America’s 
vulnerability to terrorism, and minimize the damage and recover 
from attacks that do occur.” 

The strategy established three strategic objectives: (1) preventing 
attack, (2) reducing vulnerabilities, and (3) minimizing damage. It 
organized activities into six mission areas: intelligence and warning; 
border and transportation security; domestic counterterrorism; pro- 
tecting critical infrastructure and key assets; defending against cata- 
strophic terrorism; and emergency preparedness and response.!% 

The nature of the terrorist threat and its very definition are the 
source of controversy, but The National Strategy for Homeland Security 
defined it as “(A)ny premeditated, unlawful act dangerous to human 
life or public welfare that is intended to intimidate or coerce civilian 
populations or governments.” 


The first major reorganization of federal agencies after 9/11 was the 
Department of Defense’s establishment of a new military command, 
U.S. Northern Command (NORTHCOM) on October 1, 2002. Before 
9/11 no single military command was responsible for the defense of 
the United States. NORTHCOM was tasked with the land, aerospace, 
and maritime defense of the continental United States, Alaska, 
Canada, Mexico, Puerto Rico, U.S. Virgin Islands, parts of the 
Caribbean, and the contiguous waters of the Atlantic and Pacific (out 
to 500 miles). NORTHCOM also offered military assistance to civilian 
authorities under the lead of other federal agencies. 


Despite initial misgivings inside and out of the Bush administration 
about its potential cost in money and potential bureaucratic delays, 
the administration recommended the creation of a new federal 
department responsible for homeland security. Passed on November 
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25, 2002, the Homeland Security Act of 2002 merged over 22 federal 
entities and 180,000 employees into a single department responsible 
for immigration enforcement, border and transportation security, 
information analysis and infrastructure protection, science and tech- 
nology research and development for homeland security, and emer- 
gency preparedness and response. The DHS also assumed control for 
the Transportation Security Administration, which had been estab- 
lished to screen commercial airline passengers and cargo, as well as 
oversee security practices for other forms of transportation including 
rail and public transit systems. However, the Bush administration 
chose not to fold the FBI—the lead law enforcement agency for com- 
bating terrorism—into the DHS; it was a decision that sparked con- 
troversy. Other critical homeland security missions also remained 
outside the DHS, including many activities involving bioterrorism, 
which came under the Department of Health and Human Services 
and its subordinate organizations. In addition, the administration 
rejected calls to create a dedicated domestic intelligence agency. In the 
months after the creation of the DHS, hopes for major and immediate 
gains in homeland security from the reorganization sometimes 
proved unrealistic. 


Other significant federal initiatives involved changes in the strategy, 
resources, priorities, and organizations used to conduct domestic 
counterterrorism operations. Prior to 9/11, domestic counterterror- 
ism was largely considered a law enforcement matter, with more 
emphasis on prosecuting terrorists than preemptively destroying ter- 
rorist networks. After the attacks, priorities changed. The FBI dedi- 
cated itself to preventing terrorism. For example, on May 29, 2002, FBI 
Director Robert S. Mueller announced a restructuring of the agency 
including establishing a national network of regional joint intera- 
gency terrorism task forces. He also declared that combating terror- 
ism would become the bureau’s primary mission. 

Among the most significant efforts were initiatives to increase the 
exchange of information among federal agencies and sharing intelli- 
gence with state and local law enforcement. In this regard, the admin- 
istration created two new organizations for improving the current 
system. The first was the Terrorism Threat Integration Center (TTIC), 
created on May 1, 2003. The TTIC was designed to be a central location 
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where all terrorist-related intelligence, both foreign and domestic, 
could be gathered, coordinated, and assessed. Composed of elements 
of the FBI, CIA, Department of Defense, Department of Homeland 
Security, Department of State, and other intelligence agencies, it was 
placed under the direction of the Director of Central Intelligence." 

The second new organization created was the Terrorist Screening 
Center (TSC) formed as an interagency group under the FBI to con- 
solidate all terrorist watch lists into a single function and provide 
around-the-clock access to local, state, and federal authorities. The 
TSC was charged with bringing together databases that included the 
State Department’s TIPOFF database, the FBI’s Violent Gang and 
Terrorist Offender’s File, and the Homeland Security Department’s 
many transportation security lists.!” 


One of the most important lessons of September 11 was the reminder 
of the critical role state and local governments play in homeland secu- 
rity, brought home by the deaths of hundreds of first responders in 
New York City and the key role of local agencies in responding to the 
Pentagon crash site. Americans are governed by a collection of many 
thousands of state and local jurisdictions. It is these jurisdictions that 
create and execute most emergency plans and control the police, fire- 
fighters, national guard troops, and others on the frontline of home- 
land security. However, the capabilities among these governments to 
contribute to homeland security and the initiatives they undertook 
after 9/11 varied greatly. Before September 11, communities invested 
most of their efforts toward improving physical security through law 
enforcement. In addition, there was a spate of focus on information 
security initiatives, centered primarily on preparations for Y2K, a 
hugely expensive effort to ensure computer systems would not fail as 
a result of trying to account for the change of dates in the year 2000.18 

Consequence management efforts had also long been a concern for 
local authorities, but the emphasis was on responding to natural dis- 
asters and conventional human-made calamities such as arson and 
accidental chemical spills. After 9/11 there were often halting and 
tentative movements to create a more holistic and integrated 
approach to homeland security, but results were mixed. States like 
New Jersey, for example, created their own counterterrorism offices. 
The governor of New York proposed expanding the state’s investiga- 
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Private Sector 


tive services for counterterrorism, amounting to about half the pro- 
posed budget of the state police.!? In total, at least 1,200 state and 
local legislative acts were passed in the wake of September 11.” 

Still, response to 9/11 was uneven. Complicating the response was 
the fact that communities had different needs and priorities. The 
security requirements for large urban and industrial centers, agricul- 
tural regions, and communities surrounding defense installations are 
all different. Further exacerbating the challenge was a lack of national 
preparedness standards establishing an expectation of the services 
and capacity that should be provided by federal, state, and local 
agencies.”! In addition, state and local authorities complained that 
bureaucratic rivalries and security regulations prevented federal offi- 
cials from sharing critical intelligence with them. Finally, the fiscal 
burdens of providing homeland security loomed large for many state 
and local governments. By July 2002, state governments were pro- 
jecting budget gaps totaling $58 billion. By some estimates additional 
spending on homeland security by states and major cities after 9/11 
topped $6.6 billion.2? New York City alone reported spending more 
than $200 million a year on counterterrorism programs.” The federal 
government responded by providing billions of dollars in grants to 
state and local homeland security agencies, but even this assistance 
was decried as slow and inadequate. 


After the September 11 attacks, there was widespread recognition that 
the private sector—which controls an estimated 85 percent of 
America’s critical infrastructures—had a central role to play in meet- 
ing the challenge of protecting the homeland. There was, however, lit- 
tle consensus on how best to coordinate their efforts, and, in fact, it 
was difficult to assess the full scope of preparations and vulnerabili- 
ties in the private sector. Much of the reported data was accumulated 
from voluntary surveys, and many companies withhold proprietary 
information. Still, one estimate concluded that spending on physical 
and information security by the commercial sector in the United States 
after the terrorist attacks quickly exceeded $30 billion per year.” 
Much of this investment was an extension of already existing pro- 
grams designed to protect assets and ensure continued productivity 
in the event of natural or human-made calamity. Even before 9/11, 
commercial disaster recovery and continuity services were a growing 
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business concern. One survey listed over 100 alternative work sites 
and business recovery and data storage centers in the United States 
operated by commercial vendors.” Events such as the bombing of the 
Murrah Office building and the run-up to Y2K created a cottage 
industry of firms specializing in disaster management and offering 
training, support, and products to federal, state, and local govern- 
ments. Despite efforts by the federal government to encourage infor- 
mation sharing in the private sector, there remained a great deal of 
uncertainty over how much additional effort was needed. For exam- 
ple, many industries were unsure how to respond to official terrorist 
warnings and what liability they might incur if they failed to take 
additional security measures when the federal government recom- 
mended greater precautions. Many executives also failed to see a 
strong business case for increased investments in security, causing 
critics to push for stronger government regulations. 


The 9/11 attacks roused the citizenry of the United States as few 
events had before. From the volunteers who responded to Ground 
Zero to the many Americans who donated blood or money to the vic- 
tims, the American people rushed to contribute after the attack. The 
public also contributed to homeland security by providing informa- 
tion to the authorities and, in cases such as the apprehension of the 
Shoe Bomber aboard a commercial flight, directly prevented acts of 
terrorism. However, the proposed Operation TIPS (Terrorism 
Information and Prevention System), a plan to encourage everyone 
from postal workers to truck drivers to report suspicious activity, 
generated significant opposition from civil libertarians. The Bush 
administration also moved to mobilize the public in less controversial 
ways by creating the USA Freedom Corps, which enlisted citizens in 
various volunteer activities. DHS also sought to enhance prepared- 
ness through the Ready Campaign. The government estimated that 
113 million Americans saw or read about the campaign and that 
many responded by stocking emergency supplies or taking other 
actions. However, certain government recommendations—such as 
the advice to purchase duct tape as part of a shelter-in-place strat- 
egy—became the butt of jokes. Subsequent polling also indicated 
most Americans remained unaware of preparedness plans for their 
communities, schools, and workplaces. 
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The dramatic changes following the 9/11 attacks created a new concept 
of homeland security, in many cases reversing regulations, policies, 
and assumptions that had been in force for decades. The federal gov- 
ernment possessed the will, traditions, and money to reorganize itself 
and change many of its operating procedures. But the process of 
change was more complex for state and local governments and the pri- 
vate sector, which often lacked resources and clear priorities. These key 
players would continue to struggle to define their roles and responsi- 
bilities for responding to the danger of transnational terrorism. 


CHAPTER QUIZ 


1. What are the major tenets of the Bush Doctrine? 


2. What are the key elements of The National Strategy for Homeland 
Security? 


3. Which major organizations with homeland security missions 
were not included in the new Department of Homeland 
Security? 


4. What obstacles exist to state and local governments playing a 
greater role in providing homeland security? 


NOTES 


1. The administration had actually begun to develop a more comprehensive strategy to elim- 
inate the al-Qaida network in the spring and summer of 2001 [Prepared Statement of 
Condoleezza Rice before the National Commission on Terrorist Attack upon the United 
States (April 8, 2004), p. 3, www.9-11commission.gov /hearings/hearing9 /rice_state- 
ment.pdf]. 


2. For the text of the speech see www.whitehouse.gov /news/releases /2001/09. 
3. The National Security Strategy of the United States, p. 15. 


4. Jeffrey Record, “Bounding the Global War on Terrorism,” U.S. Army War College, 
Strategic Studies Institute (December 2003), 4. See also Michael Vlahos, “Terror’s Mask: 
Insurgency within Islam,” Johns Hopkins University, Applied Physics Laboratory (May 
2002), p. 2. 


5. See, for example, Richard Miniter, Losing Bin Ladin: How Bill Clinton’s Failures Unleashed 
Global Terror (Washington, DC: Regnery, 2003); David Frum and Richard Pearle, An End to 
Evil: How to Win the War on Terror (New York: Random House, 2003). 
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2002). 
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USA PATRIOT Act of 2001, Public Law 107-56, October 26, 2001. 
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13. The National Strategy for Homeland Security, pp. vii-x. 
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2002), www.fbi.gov /pressrel/speeches /speech052902.htm; FBI Strategic Focus (May 29, 
2002) www.fbi.gov /page2/52902.htm,; U.S. Department of Justice, Report to the National 
Commission on Terrorist Attack upon the United States: The FBI’s Counterterrorism Program 
Since September 2001 (April 14, 2004), www.fbi.gov / publications /commission/9-11com- 
missionrep.pdf. 
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programs and initiatives, see Office of Homeland Security, State and Local Actions for 
Homeland Security (July 2002); National Emergency Management Association, State 
Organizational Structures for Homeland Security (2002), www.nemaweb.org/News/ 
NEMA_Homeland_Security_Report.pdf. 


For example, an assessment of the requirements of major cities is provided in The United 
States Conference of Mayors, “A National Action Plan for Safety and Security in 
America’s Cities” (December 2001), www.usmayors.org /uscm/news/press_releases /doc- 
uments /ActionPlan_121101.pdf. 


The National Governors Association estimated that homeland security spending could top 
$4 billion per year. The National Conference of Mayors estimates that in total the 200 
largest cities will spend an additional $2.6 billion. 


Written testimony of Raymond W. Kelly, Police Commissioner of the City of New York, 
before the National Commission on Terrorist Attack upon the United States (May 18, 
2004). 


Bill Zalud, “Post-Sept. 11th, Security Re-evaluates; Expects Impact through 2002,” Security, 
http:/ /www.secmag.com/CDA/ ArticleInformation/ features /BNP_Features_Item/0,5411 
,69674,00.html. 


“Alternative Site Survey,” Disaster Recovery Journal (Summer 2002): 84-93. 


Sauter ch01-03 3/21/05 2:52 PM Page 60 5 


UNDERSTANDING TERRORISM 


Sauter ch04-08 3/20/05 11:48 PM Page 62 $ 


Sauter ch04-08 3/20/05 11:48 PM Page 63 5 


CHAPTER 


THE MIND OF THE TERRORIST 


Why They Hate Us 


While nothing is easier than to denounce the evildoer, nothing is more 
difficult than to understand him. 


Attributed to Feodor Mikhailovich Dostoyevsky 


CHAPTER OVERVIEW 


For many people terrorism is easier to recognize than define, yet its 
definition carries crucial policy implications. However, perhaps even 
more important is an understanding of the groups and individuals 
who carry out terrorism. By studying what groups choose terrorism 
and why, as well as the factors that cause individuals to become ter- 
rorists, it becomes easier to devise and execute strategies to reduce 
the threat. This chapter reviews the various definitions of terrorism 
and considers the debate over the origins and goals of transnational 
terrorist activities. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Define the major elements of terrorism. 
2. List significant categories of terrorist groups. 


3. Discuss forces that prompt individuals to join terrorist groups. 
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4. Clarify the factors behind suicide terrorism. 


5. Explain factors that have increased the willingness of terrorists 
to inflict mass casualties. 


DEFINING TERRORISM 


Debated for decades by diplomats and scholars, there is still no single, 
accepted definition of terrorism—not even within the U.S. govern- 
ment. International law also offers little clarity. United Nations treaty 
negotiations involving the overall definition of terrorism have been 
stymied by disputes over the Israeli-Palestinian conflict. According to 
the cliché, “one man’s terrorist is another man’s freedom fighter.” Yet 
the attempt to define terrorism is important; the meaning of the term 
impacts legal and policy issues ranging from extradition treaties to 
insurance regulations. It also influences the critical war of ideas that 
will shape the level and role of terrorism in future generations. 


The word terrorism emerged during the French revolution of the late 
1700s to describe efforts by the revolutionary government to impose 
its will through widespread violence; the Académie Frangaise soon 
defined terrorism as a “system or rule of terror.”' However, the 
repression of populations by their own governments is usually not 
included in the modern definition of terrorism, especially by Western 
governments. 


Numerous U.S. government publications, regulations, and laws ref- 
erence terrorism. America’s National Strategy for Homeland Security 
defines it as: “any premeditated, unlawful act dangerous to human 
life or public welfare that is intended to intimidate or coerce civilian 
populations or governments.”” But even here ambiguity arises, such 
as in the definitions of unlawful and public welfare. 


The State Department’s Definition 

As part of its mandate to collect and analyze information on terror- 
ism, the State Department uses a special definition from the U.S. legal 
system. According to this law, terrorism means “premeditated, polit- 
ically motivated violence perpetrated against noncombatant targets 
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by subnational groups or clandestine agents.” Terrorist group means 
“any group practicing, or which has significant subgroups which 
practice, international terrorism.” International terrorism is described 
as terrorism involving citizens or the territory of more than one coun- 
try. In a policy that sparks some disagreement, the department counts 
noncombatants as not just civilians, but also unarmed and/or off- 
duty military personnel, plus armed troops who are attacked outside 
zones of military hostility. 


The FBI Definition 


The FBI, in accordance with the Federal Code of Regulations, delin- 
eates terrorism as “the unlawful use of force or violence against per- 
sons or property to intimidate or coerce a Government, the civilian 
population, or any segment thereof, in furtherance of political or social 
objectives.” The Bureau divides terrorism into two categories: domes- 
tic, involving groups operating in and targeting the United States with- 
out foreign direction; and international, involving groups that operate 
across international borders and/or have foreign connections.* 

As might be expected, the FBI’s definition is similar to that used in 
various U.S. criminal codes it enforces. For example, the United States 
Code describes international terrorism as violent acts intended to 
affect civilian populations or governments and occurring mostly out- 
side the United States or transcending international boundaries.° 


These sometimes conflicting definitions raise a number of questions. 
For example, under U.S. standards, foreign governments can be 
“state sponsors” of terrorism, but can countries themselves be con- 
sidered terrorist groups? Do individual “lone wolves”—such as the 
Unabomber, a deranged recluse who mailed bombs to ideologically 
selected victims he had never met, or Baruch Goldstein, a U.S. citizen 
who machine gunned 29 Muslim worshippers to death in Israel— 
count as terrorists? A study by the Federal Research Division of the 
Library of Congress addressed some of these issues by defining a ter- 
rorist action as “the calculated use of unexpected, shocking, and 
unlawful violence against noncombatants (including, in addition to 
civilians, off-duty military and security personnel in peaceful situa- 
tions) and other symbolic targets perpetrated by a clandestine mem- 
ber(s) of a subnational group or a clandestine agent(s) for the 
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psychological purpose of publicizing a political or religious cause 
and/or intimidating or coercing a government(s) or civilian popula- 
tion into accepting demands on behalf of the cause.’”° 

When all these definitions are synthesized, terrorism usually 
includes most or all of the following central elements: 


e Conducted by subnational groups 
e Targeted at random noncombatant victims 


e Directed at one set of victims in part to create fear among a larger 
audience 


e Aimed at coercing governments or populations 
e Planned to get publicity 
e Motivated by political, ideological, or religious beliefs 


e Based on criminal actions (actions that would also violate the 
rules of war) 


ISSUE: 
WHAT IS TERRORISM? 


“Wherever we look, we find the U.S. as the leader of terrorism 
and crime in the world. The U.S. does not consider it a terrorist 
act to throw atomic bombs at nations thousands of miles away 
[Japan during World War II], when those bombs would hit more 
than just military targets. Those bombs rather were thrown at 
entire nations, including women, children, and elderly people 
...” Usama bin Ladin asserted.’ It’s no surprise terrorists and 
their sympathizers reject America’s definitions of terrorism. Yet 
even many people who strongly oppose terrorism dispute key 


WHY TERRORISM 


Why do groups take up terrorism? Are individual terrorists born or 
made? These questions have attracted the attention of numerous 
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components of the American definition. They claim attacks on 
groups such as military troops and armed settlers should not 
count as terrorism. They also complain about the United States’ 
focus on subnational groups, saying it relegates the killing of 
noncombatants by governments—especially killings by 
American allies such as Israel—to a lower priority. “Denying 
that states can commit terrorism is generally useful, because it 
gets the U.S. and its allies off the hook in a variety of situations,” 
opined one British newspaper writer.’ 

One response to this dispute has been to focus on specific tac- 
tics rather than general definitions. Despite fierce bickering over 
the general meaning of terrorism, United Nations delegates have 
managed to hammer out agreements based on “operational” 
descriptions of terrorism, condemning specific tactics such as 
hijackings, bombings, and hostage-taking. 

In addition, international legal standards such as the Geneva 
Conventions offer clear, if often disregarded, guidelines. Under 
the rules of war, accepted by the United States and many other 
nations, countries are expected to settle their differences peace- 
fully if possible. Should combat break out, warring parties must 
not target noncombatants and are expected to do their best to 
prevent civilian casualties. For example, operations that might 
kill civilians must be militarily necessary and planned to mini- 
mize the risk to innocent victims. 


1. When is it appropriate for a nation to take military action, 
such as bombings in urban areas, which will undoubtedly 
claim the lives of innocent civilians? What makes this dif- 
ferent from terrorism? 

2. Are fighters who attacked U.S. troops after the occupation 
of Iraq considered terrorists, even if their violence was 
directed at armed soldiers in a combat zone? 

3. Why is it important for international bodies to reach an 
overall definition of terrorism as opposed to focusing on 
outlawing specific terrorist tactics? 


4. What is the best definition of terrorism? 
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scholars. Their approaches include political, organizational, physio- 
logical, psychological, and multicausal explanations and hypotheses 
focused on causative issues such as frustration-aggression, negative 
identity, and narcissistic rage.? Yet such academic interpretations suf- 
fer from a lack of supporting data (due to the difficulty of interview- 
ing and surveying terrorists), the absence of predictive value, and the 
difficulty of deriving theories capable of explaining extraordinarily 
diverse cultural, political, and individual motivations. 


A more utilitarian explanation for why groups and individuals practice 
terrorism is that the tactics of terrorism often work, though terrorists 
all too frequently fail to achieve their strategic goals through terrorist 
acts. To be sure, the actions of some terrorist groups such as Japan’s 
Aum Shinrikyo have been primarily driven by the twisted psyches of 
key leaders and the dynamics of cultism. But across the globe, groups 
that harness terror have often been able to obtain publicity, funds and 
supplies, recruits, and some times social change, political conces- 
sions, and even diplomatic clout—along with revenge on their ene- 
mies. Often the aim is to prompt an overreaction by authorities, 
leading to a crackdown that wins sympathy for the terrorists. In cer- 
tain circumstances—especially those where social and political condi- 
tions limit peaceful avenues of social change or where military 
conditions are unfavorable—armed groups may perceive terrorism as 
the only viable strategy to achieve these results. 


Emergence of Modern Terrorism 


While terrorism has been a recognized form of warfare for centuries, 
modern terrorism dates from the aftermath of World War II. After that 
conflict, the world witnessed the rise of guerilla (Spanish for “little 
war,” a term originating in resistance to Napoleon’s occupation of 
Spain in the nineteenth century) combat, in which small, unconven- 
tional insurgent units challenged colonial governments backed by 
traditional military forces. These guerilla armies often saw them- 
selves as legitimate military units fighting an enemy army to establish 
a new political entity. In some cases they may have qualified as such 
under the Geneva Conventions by carrying their weapons openly, 
wearing uniforms, maintaining a clear command structure, and fol- 
lowing the law of war, along with other practices. But in what is now 
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called “asymmetric warfare,” the guerillas did not try to match their 
better-equipped opponents in pitched engagements on the open bat- 
tlefield, where they would be handily defeated. Instead they looked 
for weaknesses to exploit, for example, using their mobility to 
ambush colonial convoys and then escaping into the jungle or moun- 
tains. Eventually terrorism became part of the arsenal for many 
guerilla groups, used to diminish the will of colonial armies and their 
supporters at home. Guerillas attacked colonial civilians and assassi- 
nated sympathizers. This often prompted brutal responses by the 
colonists, such as widespread torture and executions, which helped 
the guerillas by creating more supporters. 

Inspired by the success of these anticolonial “freedom fighters,” a 
variety of nationalist and ideological groups took up arms, often with 
support from the Soviet Union and other sponsors. Their refinement 
of tactics such as hijackings, bombings, and political sieges—ampli- 
fied by shrewd use of the powerful new global media network— 
would come to define the modern age of terrorism. 


Palestinian Terrorism Gets Results—To a Degree 


The apparent efficacy of terrorism was proven to the world most dra- 
matically by Palestinian groups. In June 1967, Israel inflicted a 
humiliating defeat on its Arab neighbors during the 6-Day War, 
occupying the West Bank and Gaza Strip and setting the stage for the 
era of modern international terrorism. Palestinian guerillas—losing 
hope that their Arab allies could be counted on to evict the Israelis 
and reluctant to take on the powerful Israeli military directly— 
turned to terrorism. One of the first modern terrorist acts took place 
on July 22, 1968, when gunmen belonging to a faction of the Palestine 
Liberation Organization (PLO) hijacked an Israeli passenger flight, 
winning the release of Palestinian prisoners and receiving world- 
wide publicity. Many other attacks occurred in the following years, 
perhaps most notably in 1972 when Palestinian “Black September” 
terrorists seized Israeli hostages at the Munich Olympics. Here the 
terrorists hijacked not a plane, but an international media event 
already being covered by an army of international journalists. 
Images of Palestinian operatives in ski masks guarding their cap- 
tives, and word of their demandes, spread across the globe as the inci- 
dent ended in a massacre. 
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Despite—or perhaps because of—his links to such terrorism, PLO 
leader Yasir Arafat was invited to speak at the United Nations in 1974, 
where he addressed the delegates while wearing a gun on this belt. 
This was followed by a series of PLO diplomatic victories facilitated 
by publicity from the Palestinian terrorist attacks, along with support 
from oil-rich Arab states. Ultimately, Arafat became an international 
figure, and the Palestinian issue assumed a central role in the world’s 
diplomatic agenda—events which might never have happened in the 
same way had the Palestinians focused on conventional military 
attacks against Israel instead of spectacular terrorist strikes. On the 
other hand, it’s worth noting that the PLO efforts failed to achieve 
their one-time stated goal of the destruction of Israel or, to date, an 
even more limited goal of creating an independent Palestinian state. 


Iranian-Backed Terror Changes U.S. Policy 


During the next decade, terrorism again seemingly proved effective, 
this time for the Lebanese group Hizballah and its supporters in the 
Iranian and Syrian governments. U.S. forces were trying to stabilize 
Lebanon in 1983, and Hizballah, whose members aimed to make 
Lebanon a Shiite Muslim state, wanted the Americans out of the way. 
In April, a suicide bomber blew up the U.S. Embassy in Beirut, killing 
63 people. The blast was linked to “Islamic Jihad,” used as a front name 
for Hizballah and other Iranian-supported terrorist groups. In October, 
suicide bombers hit barracks housing U.S. Marines and allied French 
paratroopers. Two-hundred and forty-two Americans and 58 French 
troops died in the attack, claimed by Islamic Jihad." After a limited 
military response, the United States pulled its troops from Lebanon. 

Hizballah then moved to another terrorist tactic, seizing and in some 
cases killing U.S. and other Western hostages. The ensuing crisis ulti- 
mately led the Reagan White House to break its policies and make a 
deal with Iran, the group’s principal backer, to trade arms for hostages. 

U.S. pledges to bring Hizballah leaders such as Imad Mughniyah 
to justice for these and other terrorist attacks proved hollow; the 
group remains a significant player in the region’s affairs. Though 
again, it is worth noting that while Hizballah has achieved notable 
short-term victories, such as the withdrawal of U.S. forces from 
Lebanon, its ultimate strategic goal of political and military domi- 
nance remains elusive. 
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Bin Ladin Viewed Terrorism as Successful 


Reflecting on a decade of terrorist attacks against the United States 
bin Ladin mocked U.S. pledges to stand firm in the Middle East, “[I]t 
shows the fears that have enveloped you all. Where was this courage 
of yours when the explosion in Beirut took place in 1983 . . . You were 
transformed into scattered bits and pieces; 241 soldiers were killed, 
most of them Marines. And where was this courage of yours when 
two explosions made you to leave Aden [Yemen] in less than twenty- 
four hours [after a bin Ladin-linked bombing in 1992]! But your most 
disgraceful case was in Somalia . . . you left the area in disappoint- 
ment, humiliation, and defeat, carrying your dead with you.” 

Such perceptions helped set the stage for 9/11. “It is now undeni- 
able that the terrorists declared war on America—and on the civilized 
world—many years before September 11th . . . Yet until September 
11th, the terrorists faced no sustained and systematic and global 
response. They became emboldened—and the result was more terror 
and more victims,” concluded Condoleezza Rice, the Bush adminis- 
tration’s National Security Advisor, in 2003.1? 


FROM THE SOURCE: 


LIBRARY OF CONGRESS PROFILE OF VELUPILLAI 
PRABHAKARAN, LEADER OF THE LIBERATION TIGERS 
OF TAMIL EELAM (LTTE) 


Velupillai Prabhakaran was born on November 27, 1954... 
He is the son of a pious and gentle Hindu government offi- 
cial, an agricultural officer, who was famed for being so 
incorruptible that he would refuse cups of tea from his sub- 
ordinates. During his childhood, Prabhakaran spent his days 
killing birds and squirrels with a slingshot. An average stu- 
dent, he preferred historical novels on the glories of ancient 
Tamil conquerors to his textbooks. As a youth, he became 
swept up in the growing militancy in the northern peninsula 
of Jaffna, which is predominately Tamil. After dropping out 
of school at age 16, he began to associate with Tamil “activist 
gangs.” On one occasion as a gang member, he participated 
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in a political kidnapping. In 1972 he helped form a militant 
group called the New Tamil Tigers, becoming its co-leader at 
21. He imposed a strict code of conduct over his 15 gang 
members: no smoking, no drinking, and no sex. Only 
through supreme sacrifice, insisted Prabhakaran, could the 
Tamils achieve their goal of Eelam, or a separate homeland. 
In his first terrorist action, which earned him nationwide 
notoriety, Prabhakaran assassinated Jaffna’s newly elected 
mayor . . . Prabhakaran won considerable power and pres- 
tige as a result of the deed, which he announced by putting 
up posters throughout Jaffna to claim responsibility. He 
became a wanted man and a disgrace to his pacifist father. In 
the Sri Lankan underworld, in order to lead a gang one must 
establish a reputation for sudden and decisive violence and 
have a prior criminal record ... Gradually and ruthlessly, he 
gained control of the Tamil uprising. Prabhakaran married a 
fiery beauty named Mathivathani Erambu in 1983. Since 
then, Tigers have been allowed to wed after five years of 
combat. Prabhakaran’s wife, son, and daughter (a third child 
may also have been born) are reportedly hiding in Australia. 
The LTTE’s charismatic “supremo,” Prabhakaran has earned 
a reputation as a military genius. A portly man with a mous- 
tache and glittering eyes, he has also been described as 
“Asia’s new Pol Pot,” a “ruthless killer,” a “megalomaniac,” 
and an “introvert,” who is rarely seen in public except before 
battles or to host farewell banquets for Tigers setting off on 
suicide missions. He spends time planning murders of civil- 
ians, including politicians, and perceived Tamil rivals. 
Prabhakaran is an enigma even to his most loyal command- 
ers. Asked who his heroes are, Prabhakaran once named 
actor Clint Eastwood. He has murdered many of his trusted 
commanders for suspected treason. Nevertheless, he inspires 
fanatical devotion among his fighters . . . Prabhakaran has 
repeatedly warned the Western nations providing military 
support to Sri Lanka that they are exposing their citizens to 
possible attacks.”8 
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Conditions for 
Terrorism 


TYPES OF TERRORIST GROUPS 


Such lessons from the 1970s and ‘80s continue to influence the broad 
range of groups now conducting terrorist operations. Just as the very 
definition of terrorism is hotly debated, so is the issue of how best to 
categorize organizations that employ the strategy. Their member- 
ships, motivations, and legal status are often murky and fluid. One 
way to classify them is through their objectives. While some groups 
have multiple objectives, most can be placed into one of four main 
types: ideological (motivated by extreme left- or right-wing political 
goals), nationalist (driven by desire to achieve autonomy for specific 
populations), religious (inspired to create political or social transfor- 
mation in the name of religion), and issue-oriented (efforts to achieve 
specific policies, e.g., abortion or animal rights laws). In some cases— 
such as the Revolutionary Armed Forces of Colombia [Fuerzas 
Armadas Revolucionarias de Colombia (FARC)], which opposes the 
Colombian government, and the Liberation Tigers of Tamil Eelam 
(LITE), which fights the government of Sri Lanka on behalf of the 
Tamil ethnic minority—the groups may operate as guerilla move- 
ments that also use terrorist techniques. 

While the factors that spawned these groups vary widely, as do the 
motives of their personnel, their existence can in part be traced to cer- 
tain basic dynamics. 


As discussed, terrorism is by definition a political act carried out by 
perpetrators with ideological motives. Famed Prussian military theo- 
rist Karl von Clausewitz famously declared that, “War is the continu- 
ation of policy (politics) by other means.” For many radicals, 
terrorism can be defined similarly. Among guerilla groups, terrorism 
may be the continuation of war by other means, a strategy used in 
additional to conventional military tactics. In all these cases, terrorism 
emerges from the furnace of social, ideological, or religious strife. 


Strife Breeds Terrorism 


The emergence and survival of terrorist groups are often linked to 
specific societal conditions. Factors that produce rich soil for the 
growth of terrorism include political violence, social strife, poverty, 
dictatorship, and modernization. In many cases, these factors spark 


—P— 


Sauter ch04-08 


74 


3/20/05 


11:48 PM Page 74 $ 


PART 2 • UNDERSTANDING TERRORISM 


guerilla warfare or violent protest movements that midwife terrorist 
groups. For example, Palestinian guerillas switched from guerilla 
attacks to hijackings. Extremists involved in the U.S. antiwar and 
civil rights demonstrations moved from legal dissent to terrorism. 

The type of strife capable of engendering terrorism must involve 
enough energized participants for a terrorist group to recruit and 
obtain logistical support. In some cases, especially where external 
state sponsors exist, the necessary level of support may be quite shal- 
low. In other cases, terrorist groups may have widespread backing. 
Nationalist groups, such as various Palestinian and Irish extremists, 
have drawn significant popular support from a broad spectrum of 
society. In the United States and Europe, ideological groups, such as 
left-wing extremists, and issue-oriented terrorist groups, such as 
American animal rights zealots and pro-life radicals, have attracted 
backing from the fringes of legitimate protest movements. 

In many but certainly not all cases, terrorist groups address legiti- 
mate grievances, but with illegitimate means in the pursuit of extrem- 
ist solutions. For example, animal rights extremists seek to reduce the 
suffering of animals, but use bombings and other illegal tactics in the 
hope of ending all animal testing. Palestinian terrorists demand 
rights for their people but are willing to target innocent victims and 
pursue the destruction of Israel. 


Poverty and Ignorance 


“We fight against poverty because hope is an answer to terror,” said 
President Bush in 2002, echoing the opinions of many that material 
deprivation promotes political violence.!* While poverty is often cited 
as a precursor to terrorism, history shows that relatively affluent 
countries have often faced terrorism, while many terrorists are from 
middle- or upper-class backgrounds. For example, most of the 9/11 
hijackers were from the relatively affluent nation of Saudi Arabia and 
followed the orders of a millionaire leader. 

Analysis by Princeton economist Alan B. Krueger failed to detect 
strong correlations between poverty and the existence of interna- 
tional terrorism groups. The data also suggested no link between lack 
of education and terrorism. “Instead of viewing terrorism as a 
response—either direct or indirect—to poverty or ignorance, we sug- 
gest that it (terrorism) is more accurately viewed as a response to 
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political conditions and longstanding feelings of indignity and frus- 
tration that have little to do with economic circumstances,” con- 
cluded Krueger. 1 


Political Oppression 


However, Krueger and others have suggested a link between inter- 
national terrorism and countries with lower levels of freedom and 
weak civil societies. In general, nations with high levels of freedom, 
such as the Western democracies, have managed to channel political 
conflict into nonviolent avenues. In recent years, domestic ideolog- 
ical and separatist terrorism has appeared to ebb in the United 
States, Europe, and Japan. Large terrorist campaigns have mostly 
originated with the citizens of oppressive regimes, such as those in 
the Middle East. But it is often unclear whether this relationship is 
one of correlation or causality. Do oppressive conditions cause ter- 
rorism, or are they themselves fostered by terrorism? Could under- 
lying social factors that lead a society toward dictatorship also 
encourage terrorism? Ironically, states with the highest level of 
political subjugation, such as the former Soviet Union, managed to 
limit terrorism. Repressive governments may be at their most vul- 
nerable when they are increasing rights; while democracy is often 
an antidote to widespread terrorism, increasing freedom may relax 
controls that had inhibited terrorist activity. Certainly Russia has 
endured a much greater toll of terrorist violence since the fall of 
communism. 

The disputed relationship between terrorism and poverty may be 
mediated by the issue of freedom. Oppressive regimes can stunt eco- 
nomic growth and exacerbate social and cultural tensions. For exam- 
ple, poverty in Pakistan left many young people unable to afford any 
education other than that offered by the madrassas, Islamic academies 
that often pushed radical teachings. Perhaps the clearest link between 
global poverty and terrorism is the existence of failed states and 
uncontrolled regions, such as those in Afghanistan and Pakistan, 
where terrorist groups were able to operate with limited opposition. 
On the other hand, North Korea, an extremely poor yet highly 
authoritarian state appears to have little terrorism. Thus, it appears 
that countries with weak civil societies and poor security have the 
greatest prospects for terrorist recruitment. 
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Modernization and Cultural Conflict 


In the wake of 9/11, enormous attention has been paid to the pains of 
modernity and cultural change in the Muslim world. For young peo- 
ple facing conflict between their traditional values and the allure of 
Western culture, the answer that resolves the contradiction may be 
Islamic extremism. This choice may prove especially attractive to 
those with specific personality types. 


By definition, terrorists are those who dedicate themselves to the 
murder of innocent victims. Because such behavior is so objectionable 
to most people, they are tempted to attribute it to individual or group 
pathology, dismissing the killers as “animals,” “crazy people,” or 
“psychopaths.” 

Yet research and observation shows most terrorists are not men- 
tally ill. Indeed, terrorist organizations often screen out disturbed 
recruits, whose suitability for training and effectiveness in the field 
may be limited. Neither is there a specific personality type—a “ter- 
rorist type”—common to most terrorists.!© While there appear to be 
psychological commonalties among many terrorists, their basic psy- 
chological structure is not radically different from certain other 
groups in society. Their eventual terrorist behavior is also strongly 
influenced by the ideologies of their groups and common but effec- 
tive methods of indoctrination, social control, and training. 


Terrorist Demographics 


Studies show most terrorists have been young, single, fit males.'” 


Such a profile would be expected of people required to conduct quasi- 
military operations and also matches the demographic cohort most 
associated with criminal violence. Of course, women have also been 
active in many terrorist organizations, which are often lead by mid- 
dle-aged men. The socioeconomic and educational backgrounds of 
terrorists vary widely, both within and between groups, but many 
observers see a trend of higher educational backgrounds among 
international terrorists. 


Individual Psychology 


While terrorists are generally not psychotic, they are also not average. 
After all, they self-select themselves to conduct activities that are con- 
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sidered morally reprehensible and/or excessively risky by many 
members of their societies. In this regard, terrorist recruits may com- 
bine some of the psychological factors that lead people to join high- 
risk military units and criminal organizations. They are risk takers 
attracted to the excitement of conflict. Other psychological predispo- 
sitions may also encourage them to join a terrorist movement, such as 
a need to belong, prove themselves, or blame their troubles on an 
external enemy. In some cases, they may be criminals out for personal 
gain such as money, power, and notoriety. 


Selection, Indoctrination, and Control 


No matter their precise individual motives, those who join terrorist 
groups are put through extensive selection, indoctrination, and con- 
trol procedures to produce the personnel needed by the group. Most 
human beings are inculcated with an aversion to killing; this is sys- 
tematically removed by the terrorist group using some of the same 
techniques employed by military organizations. Recruits begin with 
some ideological affinity for the cause; often they have moved from 
the role of sympathizer to active supporter, perhaps after a triggering 
event seen in the media or experienced in their own lives. Once in the 
group, they may take an oath of allegiance and are indoctrinated to 
think of themselves as members of a noble endeavor. While outsiders 
may see them as criminals, they view themselves as soldiers. Recruits 
are encouraged to delegate their moral responsibilities to the group’s 
leadership and dehumanize the enemy. The intended victims are 
stripped of their individual humanity by being referred to in terms 
such as “infidels,” “capitalist pigs,” or “mud people.” 

Complex rationales may be built upon the group’s specific ideol- 
ogy. One al-Qaida leader advised the group’s followers that it was 
proper to attack “infidels” (nonbelievers) even if others might be 
killed because if the bystanders were “innocent” they would go to 
paradise, and if they weren’t, they deserved to die anyway.!8 It is 
common for the leadership to claim the group has no choice but to 
engage in terrorism, thereby shifting the blame to the target group. 
Finally, it is common for terrorists to invoke the “greater good” argu- 
ment, claiming that the death of innocent victims is justified by the 
outcome of the conflict. For example, Timothy McVeigh called the 
children killed in the Oklahoma City bombing “collateral damage,” 
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using the U.S. military phrase for unintended damage caused during 
combat.” “We are willing to take the lives of these innocent persons, 
because a much greater harm will ultimately befall our people if we 
fail to act now,” declares a terrorist leader in The Turner Diaries.”° 


SUICIDE TERRORISM 


A suicide attack can be defined as a planned strike in which a willing 
attacker must kill himself or herself in order for the attack to succeed. 
This contrasts with an operation in which the attacker has a high like- 
lihood of being killed, but could possibly avoid death by escaping or 
being captured alive. Suicide attacks offer tactical advantages; the 
bomber can deliver the explosives directly into the heart of the target 
and set them off without delays caused by timers. There is no need for 
an escape plan and no risk a captured operative will give up the 
group’s secrets. In the case of the 9/11 attacks and certain truck 
bombers, the terrorists were able to create a level of destruction unat- 
tainable by conventional tactics. 

Perhaps more important than the tactical benefits of the suicide 
attack is its psychological impact, which reinforces the zealotry of the 
attacker and the vulnerability of the victim in a far more dramatic 
fashion than would be achieved by delayed explosives or standoff 
weaponry. 


Suicide attacks are neither a new nor purely Islamic manifestation of 
terrorism. The use of suicide attacks during combat became known to 
the American people in the early 1900s, when American troops in the 
Philippines battled Islamic Moro rebels (ideological forebears of the 
modern Abu Sayyaf, or Bearer of the Sword, terrorist group in that 
country). The rebels believed that killing Christians was a route to 
paradise; after ritual preparations they would charge the better- 
armed Americans armed only with a sword or knife known as a “kris”: 
“[A]ccounts abounded of seemingly peaceful Moros suddenly draw- 
ing kris and killing multiple American soldiers or civilians before 
being killed themselves.”*! Then came the kamikaze aerial and 
seaborne attacks of World War II, during which Japanese crewmem- 
bers slammed explosives-filled craft into U.S. Navy ships. In modern 
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Suicide in the 
Name of Islam 


times, the Liberation Tigers of Tamil Eelam (LTTE), or Tamil Tigers, 
have earned the reputation as the most prolific suicide terrorists in 
the world. Separatists fighting on behalf of the mostly Hindu Tamil 
minority group in Sri Lanka, the group’s Black Tiger suicide squad, 
and other members have blown up the prime ministers of two coun- 
tries, various celebrities, a battleship, and a host of other targets. LTTE 
operatives carry cyanide capsules, and dozens have killed themselves 
rather than face questioning by the authorities.”” 

A study by Robert A. Pape found incidents of suicide terrorism are 
on average more deadly than other attacks and have increased dra- 
matically over recent years; most involved terrorists trying to force 
democratic governments to withdraw from disputed territories seen 
by the terrorists as their homelands.” 


Starting with the bombings of the U.S. Embassy and Marine barracks 
in Beirut during 1983, through the Palestinian suicide bombings in 
Israel during the 1990s, the 9/11 attacks and bombings in Iraq, spec- 
tacular suicide attacks have become associated with Islamic radicals. 

Islamic history and theology record a special place for suicide 
attacks. Istishad is the Arabic religious term meaning to give one’s life 
for Allah. In general terms, this form of suicide is acceptable in the 
Islamic tradition, as opposed to intihar, which describes suicide moti- 
vated by personal problems.” 

As with other terrorists, suicide bombers are generally sane. Those 
unfamiliar with this tactic may picture a suicide bomber as a 
deranged or despondent individual, perhaps impoverished and une- 
ducated, taking his or her life on the spur of the moment. In reality, 
they are often willing cogs in a highly organized weapons system 
manufactured by an organization. Research indicates Palestinian sui- 
cide bombers are no less educated or wealthy than average for their 
communities. The process of producing a suicide bomber begins 
with propaganda, carried heavily by local media, praising earlier 
bombers. Once identified, a potential bomber is often put through a 
process lasting months that includes recruitment (with the promise of 
substantial payments to the bomber’s family), indoctrination, train- 
ing, propaganda exploitation, equipping, and targeting. The bomber 
is then provided with a device built for him or her and delivered to 
the location with instructions on the target and how to reach it. The 
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results are often a devastating attack that gains international public- 
ity—all for an investment by the terrorist group in materials and 
transportation estimated at about $150.7° 


THE DRIVE FOR MASS DESTRUCTION 


On a seemingly normal September day, highly trained terrorists 
unleash a complex plot involving the simultaneous hijacking of four 
jet airliners filled with passengers headed to U.S. destinations. 
Members of an internationally feared group, the hardened hijackers 
display fanatical loyalty to a well-known terrorist leader nicknamed 
the “Master.” They end up destroying the airliners in fiery explo- 
sions carried across the world by the media, achieving their objec- 
tives and sparking international debate about the proper response to 
terrorism. 

But the year is 1970, not 2001. The terrorist group is the Popular 
Front for the Liberation of Palestine (PFLP), not al-Qaida. And before 
blowing up the jets, the terrorists evacuated all the prisoners. Rather 
than seeking to kill large numbers of victims, the plot was designed 
to force the release of imprisoned terrorists and gain publicity, both of 
which it succeeded in doing. 

The separatist and ideological terrorists of the 1970s and ‘80s may 
have shocked the world with many of their attacks, but their agenda 
was in many ways conventional. They focused on specific goals and 
were open to negotiated political settlements. To appeal to wider con- 
stituencies, control the escalation of their conflicts, and prevent 
reprisals against their state sponsors, these terrorists often limited the 
violence of their attacks. In 1970, the terrorists blew up the planes; 
three decades later, the hijackers blew up not only the aircraft, but all 
their passengers, victims on the ground, and themselves. 

In recent decades, the rise of religious terrorist groups has been fol- 
lowed by an increasing escalation in the level of destruction sought, 
from the nerve gas attack of Aum Shinrikyo to the 9/11 attacks. While 
the yearly number of international terrorist attacks dropped dramat- 
ically from 1983 to 2003, as measured by the U.S. State Department, 
the average lethality of the attacks in recent years, at least on U.S. cit- 
izens, appears to have increased.” Analysis by the Gilmore 
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Commission indicated a similar increase in overall casualties per 
attack.” A related trend over the last several years involves attacks on 
“soft targets” such as hotels, religious facilities, and business area—a 
trend the U.S. Department of State blames for a dramatic increase in 
terrorist injuries from 2002 to 2003.7? 

Increasingly, America’s enemies have the capability and will to 
inflict mass casualties. As discussed elsewhere in this text, groups 
such as al-Qaida and Aum Shinrikyo have recruited operatives with 
high levels of education and technical sophistication. Combined with 
the increasing spread of both the knowledge and components 
required to create WMD, along with techniques for advanced con- 
ventional explosives techniques, such groups have an increasing 
capability to launch mass casualty attacks. 

There may be no political settlement that will satisfy modern reli- 
gious terrorist groups. They are motivated by a black-and-white view 
of humanity and cannot tolerate the existence of the enemy. They do 
not depend on the support of state sponsors who can be pressured by 
the West. Because they are not afraid to die, and often have no fixed 
territories or populations to protect, they are less subject to traditional 
strategies of deterrence. 


CHAPTER SUMMARY 


Terrorism is politically motivated violence carried out in most cases 
by sane and intelligent operatives. Even the increase in suicide and 
mass casualty terrorist attacks can best be understood as tactics that 
reflect reasoned, if immoral, strategic decisions by organized groups. 

In order to alter the underlying circumstances that create and 
enable terrorism, the United States must understand the organizing 
principles and motivation of the specific groups that intend to do the 
nation harm. 


CHAPTER QUIZ 


1. Identify three major elements that define 9/11 as a terrorist 
attack. 
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2. Name significant categories of terrorist groups and explain their 
motivation. 


3. Are terrorists born or made? 
4. What role does mental illness play in suicide bombings? 


5. Explain factors that have increased the propensity of terrorists to 
inflict mass casualties. 
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CHAPTER 


AL-QAIDA AND OTHER ISLAMIC 
EXTREMIST GROUPS 


Understanding Fanaticism 
in the Name of Religion 


The ruling to kill the Americans and their allies—civilians and military—is 
an individual duty for every Muslim who can do it in any country in which 
it is possible to do it, in order .. . for their armies to move out of all the 
lands of Islam, defeated and unable to threaten any Muslim. 


“Jihad against Jews and Crusaders,” World Islamic Front 
Statement, February, 1998 


CHAPTER OVERVIEW 


Al-Qaida, other radical terrorist groups, and sponsors such as the 
nation of Iran represent the most potent terrorist threat against the 
United States. Their record of successful attacks across the globe 
demonstrates the power of the ideology that sustains them—Islamic 
extremism, a heretical perversion of religious doctrines. More than 
one billion people from dozens of nations follow the Islamic faith. 
Even though only a small fraction of this population appears to sup- 
port terrorism, it is a fraction that represents a substantial pool of sup- 
port and recruits for terrorist groups. 

While the terrorists have twisted many of Islam’s principles, their 
ideology and motives draw upon its foundations. In order to under- 
stand the terrorists, it is critical to grasp their faith and view of his- 
tory. In the eyes of these terrorists, they are engaged in a historic 
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battle that began many centuries ago and includes inspirational 
events that most Americans understand vaguely if at all. 

While many terrorist groups fight under the flag of religious crusade, 
and there is cooperation among them, the threat is not monolithic. The 
groups are separated by factors such as religious sect, nationality, and 
ideology. Al-Qaida has sought to bring many of these groups together, 
while the nation of Iran has continued to support terrorism in the name 
of its own version of Islam. To the extent these efforts succeed, the threat 
to the American homeland will grow, adding to the menace posed by 
the supporters of al-Qaida and the Iranian-supported Hizballah terror- 
ist group who have already infiltrated the United States. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Identify the basic tenets of the Muslim faith and its primary 
sects. 


Outline important themes in Islamic history. 
3. Describe the beliefs and motives of radical Islamic groups. 
List the primary Islamic extremist terrorist groups. 


THE MUSLIM WORLD 


More than one-fifth of the world population is Muslim. Most are not 
Arabs, but hail from such nations as Indonesia, Pakistan, and India. 
Other countries with large Muslim populations include Turkey, 
Egypt, Iran, Bangladesh, Nigeria, Algeria, and Morocco. Significant 
numbers of Muslims live in numerous other nations from the United 
States to China. 


Islam is a monotheistic religion whose basic belief is, “There is no god 
but God (Allah), and Muhammad is his Prophet.” Islam in Arabic 
means “submission;” someone who submits to God is a Muslim. 
Muslims believe Muhammad, a merchant who lived in what is now 
Saudi Arabia from circa AD 570 to 632, received God’s revelations 
through the angel Gabriel. Words believed to have come directly from 
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Sects and 
Schisms 


God through Muhammad were compiled into the Qur’an, Islam’s 
holy scripture. 

According to Islam, Muhammad is the final prophet of God. The 
faith asserts that Abraham, Moses, and Jesus bore revelations from 
God, but it does not accept the deification of Christ. As in Judaism 
and Christianity, the religion includes concepts such as the eternal life 
of the soul, heaven and hell, and the Day of Judgment. 

The five pillars of Islamic faith outline the key duties of every 
Muslim: 


. Shahada. Affirming the faith 
. Salat. Praying every day, if possible five times, while facing Mecca 


. Zakat. Giving alms 
. Sawm. Fasting all day during the month of Ramadan 


ao FF WO N e 


. Hajj. Making a pilgrimage to Mecca 


Islamic law, called the sharia, and other traditions outline social, eth- 
ical, and dietary obligations; for example, Muslims are not supposed 
to consume pork or alcohol. Religious leaders may also order fatwas, 
or religious edicts, authorizing or requiring certain actions. Finally, the 
Muslim faith includes the concept of jihad. Seen broadly, jihad means 
“striving” for the victory of God’s word, in one’s own life or that of the 
community. Seen narrowly, it refers to holy war against infidels, or 
nonbelievers, and apostates. Both the concepts of fatwa and jihad have 
been commandeered by extremists who, despite the disagreement of 
many Islamic leaders, use them to order and justify terrorism. 

Perhaps most importantly, the Islamic tradition is all-encompass- 
ing, combining religious and secular life and law. After Muhammad’s 
death, Muslims selected caliphs, or successors. These caliphates repre- 
sented Islamic empires that combined religious and political power 
and lasted in various forms until 1924. As will be seen, the battles of 
these caliphates with the West bear an important role in the ideology 
of al-Qaida and other extremist groups. However, it was early dis- 
putes among Muslims over the identities of the rightful caliphs that 
lead to schisms in Islam. 


Less than 30 years after the death of Muhammad, the reigning caliph 


was murdered. The struggle for succession lead to a civil war that 
divided Muslims into sects, two of which remain most influential today. 
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Sunni 


The largest denomination of Muslims is the Sunni branch. They make 
up the majority of most Middle Eastern countries and Indonesia, plus 
substantial populations in many other nations. Usama bin Ladin and 
most members of al-Qaida are Sunni. Sunnis believe themselves to be 
the followers of the sunna(practice) of the prophet Muhammad. 


Shiite 

The second largest Islamic denomination, estimated to constitute 
some 10 to 15 percent of Muslims, is the Shiite (or Shi’a) sect. Shiite 
Muslims believe that Ali, the son-in-law of Muhammad, was the first 
of the twelve imams appointed by God to succeed the Prophet as 
leader of Muslims. Iran is almost entirely Shiite and Iraq mostly so, 
although members of the Sunni minority in effect ruled Iraq under 
Saddam Hussein’s regime. Pakistan and Saudi Arabia have signifi- 
cant Shiite minorities. 


Fundamentalism and Radicalism: Wahhabism, Salafiyya, and Beyond 


Founded by ibn Abd al Wahhab in the 1700s, Wahhabism has become 
a powerful strain of the Muslim faith. The faith has been called a 
“back to basics” purification of Sunni Islam. Its theological power 
was matched by the economic clout of its best-known adherents, the 
al-Saud dynasty, which conquered the holy cities of Mecca and 
Medina, creating Saudi Arabia in 1924. Since then, the Saudi govern- 
ment has used vast amounts of its petro-dollars to spread this variant 
of Islam, whose most extreme dimensions captured the imagination 
of Saudi native Usama bin Ladin. 

Other important Islamic doctrines are the Takfir and Salafist sys- 
tems. Salafists demand a return to the type of Islam practiced in its 
first generation, before what they regard as its corruption. They seek 
the absolute application of sharia, or religious law. Takfiris are com- 
mitted to attacking false rulers and apostates. According to Takfir 
doctrine, members may violate Islamic laws, such as by drinking 
alcohol or avoiding mosques, in order to blend in with the enemy. 

People who view Islam as a model for both religious and political 
governance, especially those who reject current government models 
in Islamic nations, are often called “Islamists.” “Jihadists” is a word 
used for those committed to waging holy war against the West and 
what they consider apostate rules in Muslim-populated nations. 
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Modern 
Challenges 


Glorious Past 
and Bitter 
Defeats 


However, critics contend that even using these words provides an 
undeserved religious legitimacy to the cause of these terrorists and 
defames the Islamic religion. 


As discussed earlier, political oppression is linked to terrorism. While 
poverty is not a proven cause of terrorism, it creates conditions that can 
allow terrorist groups to operate and recruit. Both circumstances are 
common in the Islamic world. Countries with a majority of Muslims 
are far less likely to be free than other nations.! They also tend to be 
poorer.” Many Muslim regions are also experiencing a “youth bulge,” 
with a disproportionate number of citizens in the 15- to-29-year-old age 
range, for whom poor economic and educational prospects may 
increase the attraction of extremism and the pool of potential terror- 
ists. Finally, large numbers of refugees are found in many Muslim 
nations, creating social strains and providing sanctuary for extremists. 


IDEOLOGY OF TERRORISM 


Where leftist and many separatist terrorist groups have focused on pro- 
ducing brand new social structures and governments, in certain ways 
Islamic extremists fight to re-create the past. In a manner foreign to many 
Westerners, these terrorists harken back to a sacred and glorious past. 
They also appeal to what bin Ladin and others refer to as the “Islamic 
Nation,” an idealized vision of a massive and united international 
Islamic population transcending national, ethnic, and class boundaries. 


Islamic extremists often attempt to cast their actions as a defensive jihad 
against U.S. and Israeli aggression, placing current conflicts in the con- 
text of a war for religious control of the world that began more than 
1,000 years ago. Following the birth of Islam, Muslim influence spread 
rapidly, as did the development of nations that practiced the faith. The 
faith expanded across the globe, including large parts of Europe such as 
Spain. During medieval times, the caliphates were militarily powerful, 
economically vibrant, and scientifically advanced. 


House of Islam; House of War 


As scholar Bernard Lewis described, the growth of the Islamic world 
was central to the Muslim philosophy: “In principle, the world was 
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divided into two houses: the House of Islam, in which a Muslim gov- 
ernment ruled and Muslim law prevailed, and the House of War, the 
rest of the world, still inhabited and, more important, ruled by infi- 
dels. Between the two, there was to be a perpetual state of war until 
the entire world either embraced Islam or submitted to the rule of the 
Muslim state.”* 


The Crusades 


During this time, Islam also came into conflict with Christianity. In 
the Middle Ages, the Catholic Church organized crusades, military 
campaigns initially focused on capturing the holy city of Jerusalem 
from Muslim control. In the West, crusade ultimately became a word 
that described the fight for a noble cause. But in the Islamic world, 
the word was understood to mean an invasion by infidels and still 
resonates today. Bin Ladin repeatedly invoked the name of famous 
Muslim warriors from the crusades, including Saladin, who defeated 
the Christians and recaptured Jeruselem during the twelfth century. 


Muslim Strength Fades 


But the military might of the Muslim nations flagged. By the early 
1900s, European powers had conquered most of the Muslim world and 
carved much of it up into colonies. As the colonialists withdrew in suc- 
ceeding decades, they left behind a Muslim world divided into coun- 
tries and ruled by a variety of often secular strong men and dictators. 

“After the fall of our orthodox caliphates on March 3, 1924 and 
after expelling the colonists, our Islamic nation was afflicted with 
apostate rulers .. . .These rulers turned out to be more infidel and 
criminal than the colonialists themselves. Moslems have endured all 
kinds of harm, oppression, and torture at their hands,” concludes the 
al-Qaida manual. 


Extremism Rises 


The violent Muslim Brotherhood, founded in 1928, fought against 
colonial governments and secular “apostate” Muslim rulers for a 
return to Islamic governance. Represented in scores of countries, the 
Brotherhood became especially active in Egypt after World War II and 
engaged in bloody battles across the Middle East, battling the influ- 
ence of secular pan-Arabist and communist ideologies. 
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ISSUE: 
A CLASH OF CIVILIZATIONS? 


After 9/11, as Americans struggled to understand why they had 
been targeted and determine appropriate responses, attention 
turned to an essay written years before by a Harvard professor. 
In The Clash of Civilizations, published in 1993, Samuel 
Huntington had predicted that cultural conflict would replace 
ideological strife in the future. “Civilizations—the highest cul- 
tural groupings of people—are differentiated from each other by 
religion, history, language and tradition . . . the fault lines of civ- 
ilizations are the battle lines of the future,” he suggested.° 
Huntington predicted conflict between the Western and Islamic 
civilizations could increase. 

The enormity of the hatred manifested by the 9/11 attacks, and 
media reports of jubilation at the attacks among some in the 
Islamic world, led Americans to wonder if al-Qaida’s actions did 
indeed represent some large conflict between civilizations. 
Certainly bin Ladin attempted to portray the situation as a cul- 
tural war between “Islam and the crusaders.” There is also no 
doubt many residents of Islamic nations disapprove of U.S. for- 
eign policy and culture. Many are angry about American support 
for Israel and repressive regimes with large Muslim populations. 
A major 2002 poll of residents in nine Islamic nations revealed 
most did not have a favorable opinion of America; a parallel poll 
in the United States revealed similar feelings toward the Muslim 
world. The poll also indicated that while most Americans did not 
believe the United States was at war with the Muslim world, they 
thought Muslims believed it was. 

However, that same poll revealed that most Muslims sur- 
veyed did not believe the 9/11 attacks were justified. Muslim 
nations have also provided support to the United States and its 
allies during the war on terrorism. The United States points to 
this and its past military defense of Muslim populations in 
Kuwait, Kosovo, and Somalia as evidence the clash is not 
between civilizations. As additional proof, the United States 
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points to the millions of Muslims living with equal rights as 
American citizens. 

Rather than a clash between civilizations, the U.S. government 
and some scholars suggest Islamic extremist terrorism repre- 
sents a within a civilization clash. As President Bush put it, “This 
is not a clash of civilizations. The civilization of Islam, with its 
humane traditions of learning and tolerance, has no place for 
this violent sect of killers and aspiring tyrants. This is not a clash 
of religions. The faith of Islam teaches moral responsibility that 
enobles men and women, and forbids the shedding of innocent 
blood. Instead, this is a clash of political visions.” 


1. Is the war on terrorism more of a battle between cultures or 
specific political entities? 

2. How do al-Qaida and other Islamic extremist terrorist 
groups use religious themes to pursue their objectives? 


3. What do these issues suggest about strategies to reduce ter- 
rorism? Would improving relations between the popula- 
tions of the United States and Muslim nations help decrease 
terrorist activity? 


In 1979, Islamic extremists entered battle with the world’s two greatest 
superpowers. These events combined to light the fuse on what 
would become an explosion of Muslim extremism and a shadow 
war that would lead to 9/11. That year the U.S.-installed Shah of 
Iran was toppled by Ayatollah Khomeini, a charismatic Shiite reli- 
gious leader supported by trained operatives from the PLO camps 
and many more average Iranian citizens who hated the Shah’s 
regime. Iran’s leader promptly declared America the “Great Satan” 
and allowed his followers to seize the U.S. Embassy and hold 52 
hostages. Khomeini’s triumph fueled religious fundamentalism 
across the Middle East, along with disdain for the United States, 
whose response to the hostage taking was a botched raid that left 
dead American troops and burned equipment strewn across the 
Iranian desert. 
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Even followers of rival Muslim sects such as the Sunnis appeared 
energized by Khomeini’s triumphs over America. Days after the 
occupation of the U.S. Embassy, Islamic radicals in Mecca, Saudi 
Arabia, seized the Grand Mosque and hundreds of hostages. Rooted 
out by a bloody military operation, many of the terrorists were pub- 
licly beheaded by Saudi authorities. In Libya, a mob—unchecked by 
local authorities—burned the U.S. Embassy. 

Extremists were further infuriated when the Israel-Egypt Peace 
Treaty was signed that same year (Egyptian president Anwar Sadat 
was assassinated two years later). Finally, in December the Soviet 
Union invaded Afghanistan, starting a war against Islamic guerillas 
that would contribute to the collapse of communism and the emer- 
gence of twenty-first century terrorism. 


1980s: Emergence of Shiite Extremist Terrorism 


In 1981 Tehran released its American hostages, in part because of 
Iranian fears of attack from incoming President Ronald Reagan. 
Embroiled in a debilitating war with neighboring Iraq, the funda- 
mentalist regime increasingly turned to terrorism as a tool. Iranian hit 
teams targeted opponents around the world. For example, a former 
Iranian diplomat was murdered in Maryland by an American opera- 
tive dressed as a postal worker; the accused killer later surfaced in 
Iran. At the same time, Tehran began sponsoring a variety of terror- 
ist groups. One of them, al-Dawa, or “The Call,” was dedicated to 
attacking Iraqi interests. In December 1981, the group demonstrated 
a terrorist technique previously unfamiliar to many, dispatching a 
suicide bomber to demolish Iraq’s embassy in Beirut. Lebanon had 
become a cauldron of religious and political hatred containing Syrian 
and Israeli invaders, local religious militias, and Iranian 
Revolutionary Guards. Into that caustic mix dropped the U.S. 
Marines, dispatched to separate the nation’s warring factions in late 
1982. In Beirut the Americans would meet Imad Mughniyah, their 
most lethal foe until the days of bin Ladin, and his Hizballah organi- 
zation, backed by Iran with support from Syria. 

Hizballah, whose members hated the Israelis and aimed to make 
Lebanon a Shiite Muslim state, wanted the Americans out of the way. 
On April 18, 1983, a suicide bomber blew up the U.S. Embassy in 
Beirut, killing 63 people, including 17 Americans among whom were 
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FROM THE SOURCE: 
MOST WANTED POSTER, IMAD MUGHNIYAH 


The FBI reward for Imad Mughniyah is based on his alleged con- 
nection to the murder of Navy diver Robert Stethem, but 
Mughniyah has been linked to other terrorist attacks against 
Americans, including the bombing of the U.S. Marine barracks 
in Beirut. See Figure 5.1. 


many of the CIA’s leading experts on the region. The blast was linked 
to Islamic Jihad, used as a front name for Hizballah and other Iranian- 
supported terrorist groups. 

The marines, hunkered down in strategically execrable emplace- 
ments near the Beirut airport, tangled with a complicated assortment 
of adversaries struggling for the future of Lebanon. Shortly before 
reveille on the warm morning of October 23, a yellow Mercedes truck 
roared over concertina wire obstacles, passed two guard posts before 
sentries could get off a shot, slammed through a sandbagged position 
at the entrance to the barracks, and exploded with the force of 12,000 
pounds of dynamite.’ The building, yanked from its foundations by 
the blast from the advanced explosive device, imploded, crushing its 
inhabitants under tons of broken concrete and jagged steel. 
Simultaneously a second suicide bomber hit the Beirut compound 
housing French paratroopers. When rescuers finished tearing 
through the smoking rubble, while dodging fire from enemy snipers, 
they counted 241 Americans and 58 French troops dead. Islamic Jihad 
claimed responsibility. 1 

The American public clamored for a response. President Reagan 
considered major attacks on the Syrian-controlled Bekaa Valley where 
Iranian Revolutionary Guards supported Hizballah. But after dis- 
agreements in the administration, Reagan settled for shelling and a 
limited air strike on other targets (including Syrian positions)—attacks 
that were seen as ineffective by American adversaries and allies 
alike.!! Mughniyah, the suspected mastermind of the attacks, and his 
operatives remained unscathed in their terrorist sanctuary. For months 
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FIGURE 5.1 


MOST WANTED POSTER FOR IMAD FAYEZ MUGNIYAH. (FEDERAL BUREAU OF 
INVESTIGATION, WWW.FBI.GOV/MOSTWANT/TERRORISTS/TERMUGNIYAH.HTM.) 


CONSPIRACY TO COMMIT AIRCRAFT PIRACY, TO COMMIT HOSTAGE TAKING, TO COMMIT AIR PIRACY RESULTING IN 
MURDER, TO INTERFERE WITH A FLIGHT CREW, TO PLACE A DESTRUCTIVE DEVICE ABOARD AN AIRCRAFT, TO HAVE 
EXPLOSIVE DEVICES ABOUT THE PERSON ON AN AIRCRAFT, AND TO ASSAULT PASSENGERS AND CREW; AIR PIRACY 
RESULTING IN MURDER; AIR PIRACY; HOSTAGE TAKING; INTERFERENCE WITH FLIGHT CREW; AND PLACING EXPLO- 
SIVES ABOARD AIRCRAFT; PLACING DESTRUCTIVE DEVICE ABOARD AIRCRAFT; ASSAULT ABOARD AIRCRAFT WITH 

INTENT TO HIJACK WITH A DANGEROUS WEAPON AND RESULTING IN SERIOUS BODILY INJURY; AIDING AND ABETTING 


IMAD FAYEZ MUGNIYAH 


Alias: Hajj 
DESCRIPTION 
Date of Birth Used: 1962 Hair: Brown 
Place of Birth: Lebanon Eyes: Unknown 
Height: 5'7" Sex: Male 
Weight: 145 to 150 pounds Citizenship: Lebanese 
Build: Unknown 
Language: Arabic 
Scars and Marks: None known 
Remarks: Mugniyah is the alleged head of the security apparatus for the 


terrorist organization, Lebanese Hizballah. He is thought to be in Lebanon. 


CAUTION 


Imad Fayez Mugniyah was indicted for his role in planning and participation in the June 14, 1985, hijacking of a commer- 
cial airliner which resulted in the assault on various passengers and crew members, and the murder of one U.S. citizen. 


REWARD 


The Rewards For Justice Program, United States Department of State, is offering a reward of up to $25 million for infor- 
mation leading directly to the apprehension and/or conviction of Imad Fayez Mugniyah. 


Source: http://www.fbi.gov/mostwant/terrorists/termugniyah.htm 


the Marines kept up the fight, sustaining numerous casualties. But as 
the Lebanese security situation continued to disintegrate, the admin- 
istration pulled the leathernecks from Lebanon in February 1984. 
Hizballah continued its attacks, kidnapping numerous Western 
hostages and murdering a captive American CIA official and a 
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Marine officer, allegedly with the close cooperation of Tehran (as of 
2004, the group had killed more Americans abroad than any other 
terrorist group, including al-Qaida). By the early 1990s, the organi- 
zation had emerged as a political movement in Lebanon and 
expanded from its Middle Eastern base to strongholds in Latin 
America’s tri-border area where Argentina, Brazil, and Paraguay 
meet. Imad Mughniyah, the purported killer of Americans in 
Lebanon, and his Iranian sponsors were linked to two huge car 
bomb attacks on Jewish targets in Argentina that left more than a 
hundred dead. 


Unable to afford Afghanistan’s price in blood and gold, the Soviets 
began to withdraw in 1988. The ebbing tides of war left aground 
thousands of hardened foreigner mujahideen (holy warriors) who 
had traveled from across the world to fight communism in support of 
radical Islam. A 6-foot, 6-inch, left-handed Saudi multimillionaire and 
mujahideen financier decided to help the so-called Afghan Arabs 
identify their next battle. In 1988, Usama bin Ladin began forming an 
organization of these militants; he called it al-Qaida (“the base” in 
English) after a training camp in Afghanistan.!* (The CIA provided 
funding and weapons to the mujahideen, but denies having sup- 
ported bin Ladin directly during the Soviet war.) 

As discussed earlier, bin Ladin went on to mold al-Qaida into an 
Islamic terrorist “organization of organizations” that combined 
numerous organizations with members from dozens of nations. 


The international fighters turned their attention toward the relatively 
moderate governments of such Islamic countries as Egypt and 
Saudi Arabia, which they viewed as apostates, and the United 
States, Israel, and the United Nations, which they considered infi- 
dels and blood enemies. Al-Qaida began developing an ideology 
based on the eviction of the United States from the Middle East, the 
overthrow of U.S. allies in the Islamic world, and the destruction of 
the Israeli state. This call of Islamic extremism exercised renewed 
magnetism for Muslims angry with PLO compromises, aware of 
communism’s failure as a model, and unmoved by self-proclaimed 
pan-Arabist leaders such as Libya’s Muammar Qadhafi and Iraq’s 
Saddam Hussein, who were attacked as secularists. The collapse of 
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Soviet communism, for which the mujahideen claimed partial 
credit, emboldened radicals with a belief they could defeat the 
remaining superpower. 

The U.S.-led war against Hussein in early 1991 fueled the move- 
ment; when the United States permanently positioned troops in Saudi 
Arabia after the war, al-Qaida saw it as a galvanizing issue and prom- 
ised to drive the “crusaders” from the “land of the two holy mosques 
(Mecca and Medina.)” Over the coming years, al-Qaida and its sup- 
porters would establish a record of delivering on their promises, even 
returning to targets, such as the World Trade Center and U.S. Navy 
ships in Yemen, to complete their destruction. 

Major operations executed, coordinated, or inspired by al-Qaida 
include bombings targeted at U.S. troops in Yemen during 1992; assis- 
tance to the guerillas who killed numerous U.S. troops in Somalia in 
1993; the car bomb killing of five Americans in Saudi Arabia during 
1995; bombings of the U.S. embassies in Kenya and Tanzania, that 
killed some 300 people in 1998; the planned bombing of the LA air- 
port in 1999; the murder of 17 U.S. sailors in a suicide attack on the 
USS Cole in 2000; the 9/11 attacks; and deadly strikes in Saudi Arabia, 
Turkey, Indonesia, and other locations. 


COMMON FRONT AGAINST THE WEST 


Long divided by denomination, ethnicity, and other factors, Islamic 
extremists have found a common cause in their hatred of the United 
States. Al-Qaida sought to exploit this by rallying extremist organiza- 
tions to its side. In February, 1998, bin Ladin announced a new ter- 
rorist alliance, the “International Islamic Front for Jihad against the 
Jews and Crusaders.” The group issued a fatwa, or Islamic religious 
ruling: “The ruling to kill the Americans and their allies—civilians 
and military—is an individual duty for every Muslim who can do it 
in any country in which it is possible to do it . . . We—with Allah’s 
help—call on every Muslim who believes in Allah and wishes to be 
rewarded to comply with Allah’s order to kill the Americans and 
plunder their money wherever and whenever they find it. We also 
call on Muslim ulema [religious figures], leaders, youths, and soldiers 
to launch the raid on Satan’s U.S. troops and the devil’s supporters 
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allying with them, and to displace those who are behind them so that 
they may learn a lesson.” 


Although the Islamic Front was composed of Sunni Muslims, there 
have been signs of cooperation between its members and the Shiite 
Hizballah and Iranians. An arrested al-Qaida operative testified to 
ties between that group and Hizballah. The 9/11 Commission found 
“far greater potential for collaboration between Hezbollah and al 
Qaeda than many had previously thought.” 14 The commission reported 
that al-Qaida operatives had “traveled to Iran and Hezbollah camps 
in Lebanon for training in explosives, intelligence and security” and 
that bin Ladin was interested in Hizballah’s tactics in the 1983 bomb- 
ing of U.S. marines in Lebanon. While these terrorist groups may 
have different political agendas and even contrasting religious views, 
these may not prevent them from cooperating when operations are in 
their mutual interest. 


On June 25, 1996, a sophisticated truck bomb tore apart the Khobar 
Towers, a U.S. military complex in Dharan, Saudi Arabia, killing 19 
Americans and wounding hundreds more. “We thought it was the 
end of the world. Some were crying; some just sat on the ground and 
held their ears,” said a witness. The attack followed another bombing 
of Americans a year earlier in Saudi Arabia; an attack the 9/11 
Commission reported was supported financially by bin Ladin. 

The Khobar Towers attack, which produced images of destruction 
similar to the 1983 Marine barracks bombing, produced an outcry in 
the United States. “I am outraged by it,” declared President Clinton. As 
President Reagan before him, Clinton promised, “The cowards who 
committed this murderous act must not go unpunished.”!° But they 
did. Later identified in a U.S. indictment as Saudi Shiite extremists 
backed by Iran and linked to Hizballah, the Khobar bombers remained 
free after their attack. According to the 9/11 Commission, there is 
“strong but indirect evidence” that al-Qaida cooperated in the attack. 

America responded to the terrorist threat in Saudi Arabia by 
pulling out of the Khobar Towers and relocating its troops to a remote 
area of Saudi Arabia; by the summer of 2003, most U.S. troops would 
be out of Saudi Arabia entirely. 
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The withdrawal from Saudi Arabia occurred after the U.S. liberation 
of Iraq; the quick and successful initial stage of that operation less- 
ened the need for a Saudi base. But the operation appeared to ener- 
gize Hizballah. With agents on four continents, “We see them actively 
casing and [conducting surveillance on] American facilities,” said 
then-CIA director George Tenet in 2003. Around the same time, 
Hizballah’s leader was reiterating the group’s position on the United 
States. “In the past, when the Marines were in Beirut, we screamed, 
‘Death to America!” Hassan Nasrallah declared in 2003. “Today, 
when the region is being filled with hundreds of thousands of 
American soldiers, ‘Death to America!’ was, is and will stay our slo- 
gan.”16 While Hizballah had not been known to launch attacks in the 
United States, U.S. officials stepped up their scrutiny of the group’s 
operatives in the United States. 


Iraq as a Magnet 


Extended U.S. occupation and insurgent warfare created a destina- 
tion for Islamic extremists, much as Afghanistan and to a lesser extent 
Lebanon had in years before. U.S. forces captured hundreds of for- 
eign fighters, many with links to al-Qaida.!” The Ansar al-Islam 
group and the linked Jama’at al-Tawhid and Jihad organizations, also 
called the al-Zarqawi network, lead by Sunni extremist Abu Musab 
al-Zarqawi, carried out operations against U.S. and other coalition 
and UN targets. Hizballah and Iranian agents also infiltrated the 
country.!® Both Shiite and Sunni extremists opposed U.S. plans to fos- 
ter a democratic government in Iraq (although historical tensions 
between the groups remained evident). 


Democracy Is a Deviation 


The United States aimed to demonstrate the power of democracy in 
the Middle East. But peaceful democratic change is a “deviant and 
misleading practice that contradicts Allah’s teachings to fight in the 
name of God,” according to bin Ladin. The driving principle of 
Islamic extremism is summarized in the al-Qaida manual: “an Islamic 
government would never be established except by the bomb and rifle. 
Islam does not coincide or make a truce with unbelief, but rather con- 
fronts it.” 
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For detailed information on individual groups see Appendix 1. 


CHAPTER SUMMARY 


Islamic extremists believe they are fighting a war that has lasted for 
centuries and will continue until they have prevailed. Comprised of 
numerous organizations and numbering many thousands of hard- 
ened terrorist and active supporters, the Islamic extremist movement 
is not monolithic but is capable of cooperation. It will harness the 
most effective weapons it can muster to achieve victory. Democracy 
and economic reform may lessen the appeal of these groups but will 
not eliminate their rallying cry or potential for catastrophic violence. 


CHAPTER QUIZ 


1. Identify three countries outside the Middle East with substantial 
Muslim populations. 


2. Explain two different meanings of jihad. 
3. Describe the capabilities of Hizballah. 


4. Recount two key strategic objectives claimed by Usama bin 
Ladin. 
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CHAPTER 


THE TRANSNATIONAL 
DIMENSIONS OF TERRORISM 


The Unique Dangers of the 
Twenty-First Century 


HAMAS and PIJ in the U.S. warrant equal vigilance due to their ongoing 
capability to launch terrorist attacks inside the U.S. 


FBI Director Robert Mueller ITI, 2004 


CHAPTER OVERVIEW 


International and transnational terrorism impacts the United States in 
several ways. Most important are direct attacks against the U.S. home- 
land and citizens abroad. But America’s homeland security is also 
affected by terrorist groups that organize and raise funds here in the 
United States to support violent acts against U.S. allies and innocent 
civilians around the world. Along with global terrorist networks, 
transnational criminal organizations pose a threat to U.S. security, 
especially when they cooperate with terrorist groups that exploit the 
trade in illegal drugs, a phenomenon known as narco-terrorism. This 
both increases the supply of drugs in America and destabilizes U.S. 
allies. The capabilities of international terrorist groups have been 
enhanced in many past cases by the assistance of foreign govern- 
ments, known as state sponsors of terrorism. 
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CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


Define transnational terrorism. 


Understand modern trends in transnational terrorism involving 
the United States. 


3. Identify major international terrorist groups operating in the 
United States and their objectives. 


Explain the concept and dimensions of narco-terrorism. 


Identify terrorist state sponsors and trends in their support of 
international terrorism. 


AMERICA IN A GLOBALIZED WORLD 


When President George Washington urged his young nation to avoid 
foreign entanglements in his 1796 farewell address, he could hardly 
have imagined the complexity of America’s current relationship with 
the world. Connected to other countries by technology, economics, 
travel, news media, diplomacy, security, and vast numbers of immi- 
grants from an array of ethnic and religious backgrounds, the United 
States has become linked inextricably to virtually every corner of the 
planet. This phenomenon is often called globalization 

Long before 9/11, American security analysts pondered the impli- 
cations of globalization. Since 1989, the U.S. State Department has 
provided an annual review of global terrorism. The 1999 report, 
marking a decade of tracking terrorist trends, included a prominent 
inset with a picture and brief biography of Usama bin Ladin. The 
analysis concluded that the al-Qaida leader was a major threat who 
believed himself capable of directing terrorist strikes worldwide.' 
The assessment could not have been more accurate. The State 
Department report illustrated that even in advance of these strikes 
Americans knew a great deal about the potential enemies it might 
face in the future and their growing capacity to use transnational 
means to threaten global peace and stability. In fact, long before 9/11, 
experts had largely reached a common view on three key points. 
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Modern History 
of Transnational 
Terrorism against 
the United States 


1. The diversity of possible threats is increasing. 
2. There will be more nonstate threats with global reach. 
3. States may act in concert with these groups. 


They were right on all three counts.” 


DEFINING TRANSNATIONAL TERRORISM 


Under the U.S. legal definition, transnational, or international, terror- 
ism occurs primarily outside the territorial jurisdiction of the United 
States, or transcends national boundaries by its means, the people it 
intends to terrorize, or the location in which the terrorists operate or 
seek asylum. International terrorist groups can also be defined as 
those whose leadership and personnel are primarily foreign and 
whose motives are primarily nationalist, ideological, or religious. 


As holiday travelers dashed through New York’s La Guardia Airport 
on the evening of December 29, 1975, thoughts of upcoming New 
Year’s Eve celebrations disappeared with an enormous explosion. “A 
bright blue flash. A blast of air. Deafening noise. Broken glass rained 
down,” described one account.’ The impact was so strong one sur- 
vivor thought a plane had crashed into the terminal, but the actual 
cause was a time bomb placed in a coin-operated storage locker. The 
device killed 11 people and wounded more than 70 more. Survivors 
saw bodies, body parts, and blood strewn across the airport, but there 
was no screaming, reported one observer: “It seemed like everyone 
was in shock. The whole thing was just a complete wreck, with mobs 
of people just standing around. You can’t believe it until you see 
something like this.”* 

The blast prompted a massive investigation. But in 1975, there 
were so many terrorist groups with the capabilities and intent to tar- 
get the United States that the police faced a daunting task. Domestic 
groups such as left-wing extremists and the Jewish Defense League 
came under suspicion. The FALN (Fuerzas Armadas de Liberacion 
Nacional Puertorriquena), a Cuban-backed Puerto Rican independ- 
ence group, had detonated a deadly bomb in a New York tavern less 
than a year before and appeared a potential.° 
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There was also an extensive roster of international terrorists to con- 
sider. U.S. citizens abroad had recently been targeted by communist 
ideological terrorists from Germany and Japan, among others, and a 
variety of Middle Eastern groups. While not believed likely to attack the 
United States, Irish Republican Army (IRA) operatives were known for 
their devastating bombings in Great Britain and support activities in 
New York and elsewhere in the United States. Investigators considered 
the Palestine Liberation Organization (PLO), which quickly denied 
involvement. Then, in September 1976, Croatian nationalist terrorists, 
seeking independence from Yugoslavia, hijacked a TWA jet leaving 
La Guardia. They also left a bomb in a coin-operated locker at New 
York’s Grand Central Station. It went off while being dismantled, killing 
one police officer and badly wounding another. Despite differences in 
the airport and train station bombs, and denials from the captured 
hijackers, officials continued to suspect the Croatians of involvement in 
the La Guardia blast. The crime was never solved. 

One lesson, however, was clear. U.S. citizens at home and abroad 
were at risk from international terrorist groups with a vast range of 
ideologies but one common belief—that attacking American targets 
could further their causes. 


As the leader of the capitalist world and military ally of many nations, 
the United States found itself the target of numerous ideologically 
motivated terrorist groups. Left-wing organizations, such as the 
German Red Army Faction (also known as the Baader-Meinhof 
group), Japanese Red Army, Greek left-wing terrorists, and Philippine 
communist terrorists, attacked Americans abroad. Many of these 
groups received support from communist nations and Palestinian 
groups. Neo-fascist terrorists, some believed to have Middle Eastern 
backing and connections to right-wing extremists in the United States, 
also posed a potential threat to Americans in Europe, with their bombs 
targeted at public gatherings killing almost 100 people in 1980 alone. 


Many terrorists have opposed the United States because of its actual 
or perceived role in their separatist or nationalist conflicts. U.S. citi- 
zens, while not directly targeted in most cases, have been put at risk 
by the attacks of organizations such as the Irish Republican Army, the 
Basque separatist organization ETA, and Liberation Tigers of Tamil 
Eelam (LTTE). However, the most significant of nationalist conflicts 
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State 
Sponsorship 


for the United States has been the consequences of the struggle 
between the Palestinians and Israelis. 

During the 1970s and ’80s, PLO and other Palestinian terrorists from 
secular and leftist factions killed numerous Americans during their 
operations abroad, which were sometimes coordinated with European 
and Japanese leftist terrorists. The Palestinian terrorist strategy and 
some of its major strikes are detailed earlier in this book. However, the 
extensive list of Palestinian terrorism includes numerous other attacks 
on Americans. During a 1973 raid on a U.S. Pan American jetliner in 
Rome, terrorists slaughtered many of the passengers with machine gun 
fire and grenades; a statement claimed the attack was in retaliation for 
U.S. arms shipments to Israel. In October 1985, Palestinian commandos 
seized the Italian cruise liner Achille Lauro and killed wheelchair-bound 
American Leon Kinghoffer and threw him into the sea. On March 30, 
1986, a bomb made of Soviet-Bloc Semtex plastic explosive blew up 
aboard TWA Flight 840 heading from Rome to Athens. The blast tore 
open a hole in the fuselage; four victims, including eight-month-old 
Demetra Klug, were sucked out and plummeted thousands of feet to 
their deaths. A Palestinian terrorist group called the attack revenge for 
a recent naval battle between the United States and Libya, an ally of 
Palestinian extremists and a state sponsor of terrorism. 


Much of the world’s terrorism during the 1980s was supported by 
state sponsors—nations that supported terrorist groups as part of 
their international security policies. Aside from the Soviet Bloc, which 
provided varying levels of patronage to a number of terrorist organi- 
zations before its demise, the United States traditionally counted Iran, 
North Korea, Cuba, Syria, Libya, Sudan, and Iraq as state sponsors. 
Of those, Libya was considered one of the most flagrant; its flam- 
boyant dictator Muammar Qadhafi tangled with the United States for 
years, often using Palestinian and other terrorist groups to pursue his 
objectives. This even included offering $2.5 million to a Chicago street 
gang called the El Rukns in return for terrorist attacks in the U.S. home- 
land—a scheme later broken up by American law enforcement. After a 
Libyan-sponsored bombing killed two U.S. servicemen in Germany, 
United States war planes struck Libya in 1986. But Qadhafi continued 
his attacks, often using Japanese Red Army (JRA) terrorists. They tar- 
geted U.S. facilities abroad, and in April 1988, alleged JRA terrorist Yu 
Kikumura was arrested for a plot to set off bombs in New York City. 
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The Libyan campaign peaked on December 21, 1988, when Pan Am 
Flight 103 exploded over Lockerbie, Scotland, killing 270 passengers 
and people on the ground. 

However, over the last decade Libya and most other state sponsors 
have reduced their support of terrorism in the face of U.S. and interna- 
tional pressure. Qadhafi eventually renounced terrorism, agreed to 
compensate the families of Pan Am Flight 103 victims, and arranged 
to dismantle his WMD program. Sudan has expanded its cooperation 
with the West, and Iraq's terrorist sponsors—who provided undisputed 
support to certain terrorist groups and had less clear connections to 
al-Qaida—were removed by the U.S. invasion. Cuba, North Korea, and 
Syria—which has continued to support Hizballah and Palestinian ter- 
rorist groups and is suspected of assisting anti-American insurgents in 
Iraq—remain as sponsors, although none is as active now as in the past. 


Besides global terrorist networks, there are other nonstate actors, with 
goals geared toward personal gain rather than public objectives, 
whose actions nevertheless have significant consequences for home- 
land security. International criminal organizations participate in drug 
and arms trafficking, money laundering, cigarette smuggling, piracy, 
counterfeiting, illegal technology transfers, identity theft, public cor- 
ruption, and illegal immigration. Assessments of the international 
crime threat are that it is pervasive, substantial, and growing. For 
example, organized alien smuggling networks bring over 500,000 ille- 
gal immigrants into the United States annually and move four million 
people worldwide, generating revenues of over $7 billion. Worldwide 
money laundering is estimated at $1 trillion. Individuals engaged in 
these criminal activities are also increasingly employing sophisticated 
methods and advanced technologies.® 

There is no single global crime cartel, but there is evidence that 
groups have cooperated in joint operations. Though virtually no coun- 
try is free of organized crime, the eight largest crime organizations are 
centered in China (including Hong Kong and Taiwan), Colombia, 
Italy, Japan, Mexico, Russia, the United States, and Canada. Each 
group has extensive international links and cuts across regions of 
strategic concern to the United States. In recent years Albanian, 
Burmese, Filipino, Israeli, Jamaican, Korean, Thai, Nigerian, and 
Pakistani groups have also drawn the concern of international law 
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ISSUE: 


ARE INTERNATIONAL CRIMINAL ORGANIZATIONS 
A THREAT TO HOMELAND SECURITY? 


Some observers maintain that criminal organizations are not a 
direct threat to the security of the United States since they seek to 
exploit and manipulate rather than coerce or compel the state to 
take specific acts. Nor do they directly threaten the stability of the 
nation. Transnational criminal organizations, however, can impact 
on homeland security threats in several distinct and important 
ways. Organized crime and corruption can undermine political, 
economic, and social stability of weak states thus increasing the 
potential for governments to be co-opted by authoritarian regimes 
or terrorist groups. This threat is particularly evident in central 
Asia, central and southeast Europe, and South America. Criminal 
groups can also facilitate, fund, supply goods and services to, or 
even act on behalf of terrorist groups. There are reports the 
Camorra crime organization and other criminal groups based 
around Naples, Italy, supplied heavy weapons to the ETA terrorist 
group in exchange for cocaine and hashish. Arms smuggling 
groups have also been linked to terrorist groups.’ The line between 
these groups can become vague. In some instances, including a 
major U.S. and Canadian methamphetamine ring, money gained 
from drug trafficking has been sent to terrorist groups. Also, 
other transnational groups mimic criminal activities, using the 
same methods and techniques to evade law enforcement and 
exploit the gaps in U.S. domestic security. Finally, the toll of inter- 
national crime in social costs, lost revenue, and the demand for 
intelligence and law enforcement resources complicates and exac- 
erbates the challenge of responding to terrorist groups. 


1. Should major criminal organizations be considered threats 
to America’s homeland security? 

2. What priority should be placed on investigating transna- 
tional criminal organizations? 
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3. Are any of the tools used in the war on terrorism appropri- 
ate for use against criminal groups? If so, which ones? 


4. Are there reasons these groups should not receive substan- 
tial focus? 


enforcement. The organizations also appear to be evolving, employing 
looser, more adaptive, and innovational command structures.” 


Narco-Terrorism 


In the area of drug smuggling the nexus between terrorism and crim- 
inal activity is particularly troubling. According to the U.S. Drug 
Enforcement Administration (DEA), a narco-terrorist organization is 
a “group that is complicit in the activities of drug trafficking to fur- 
ther or fund premeditated, politically motivated violence to influence 
a government or group of people.” Almost half of the groups desig- 
nated by the State Department as “foreign terrorist organizations” 
may be tied to the drug trade, the DEA estimates. Because “drugs and 
terror frequently share a common ground of geography, money, and 
violence,” keeping drug money from financing terror is an important 
part of the nation’s counterterrorism strategy." 

The international market in drugs can provide several benefits to 
terrorist groups. They can acquire operating funds from producing 
drugs and/or protecting those who do. They also benefit from the 
instability produced by drug trafficking and may also see value in 
encouraging the use of drugs by the United States and other enemy 
populations. For example, the Taliban government of Afghanistan 
earned huge amounts of money from the opium trade during the 
time it was sheltering al-Qaida, and the DEA has claimed there is 
“multi-source information” that bin Ladin has been involved in the 
financing and facilitation of heroin trafficking.’ The Afghan heroin 
trade continued after the U.S. invasion, although the public evidence 
tying it to remnant Taliban and al-Qaida forces is not conclusive. 

The link between drugs and terror is most evident among the ter- 
rorist groups active in Colombia such as the Revolutionary Armed 
Forces of Colombia (FARC). These groups are responsible for a sub- 
stantial amount of the cocaine and heroin sold in America. They also 
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target U.S. citizens and property in Colombia, often using their trade- 
mark strategy of kidnapping for ransom. According to public records, 
more than 70 Americans have been kidnapped by terrorist and crim- 
inal groups in Colombia; at least 13 have died.!3 U.S. security assis- 
tance to the Colombian government has also put Americans in harm’s 
way. The FARC has reportedly described such assistance as an “act of 
war.”!4 A U.S. pilot was killed by FARC guerillas in 2003 after his 


FROM THE SOURCE: 


U.S. DEPARTMENT OF JUSTICE ANNOUNCEMENT OF 
INDICTMENT OF FARC LEADERS (NOVEMBER 2002) 


The first indictment, returned in October (2002) and 
unsealed today, charges three defendants with conspiring 
in 1997 to take U.S. nationals Jerel Shaffer and Earl Goen 
hostage while they were working in Venezuela in the 
import/export and oil industries. The indictment names as 
defendants: Jorge Briceno Suarez, a/k/a “Mono Jojoy” and 
“Carlos,” the overall military commander of the FARC 
and, at the time of the events described in the indictment, 
the commander of the Eastern Bloc of the FARC; Thomas 
Molina Caracas, a/k/a Tomas Medina Caracas and “El 
Patron” and “El Negro Acacio,” who at the time was the 
commander of the 16th Front of the FARC; and a FARC 
member known as “El Loco” and “Fernando.” 

The indictment charges that Briceno Suarez and 
Molina Caracas, along with FARC members and others, 
worked together in targeting and taking the U.S. nationals 
hostage in Venezuela, detaining the victims against their 
will and transporting Shaffer to the jungles of Colombia, 
where he was bound, beaten and held hostage at gunpoint 
for nine months until about $1 million was paid for his 
release. While Shaffer was being transported, his FARC 
captors murdered two local residents. As a result, the 
maximum legal punishment for the hostage taking charge 
is the death penalty. 
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... A third indictment, also unsealed today in the 
District of Columbia, charges FARC senior commander Henry 
Castellanos Garzon, a/k/a “Comandante Romana,” with 
hostage taking and conspiracy to commit hostage taking for 
the March 1998 kidnaping of four Americans. The indictment, 
originally filed under seal in December 1998, charges Romana 
with kidnaping Louise Augustine, Todd Mark, Thomas Fiore 
and Peter Shen—all Americans—and a foreign national. The 
indictment states that Romana personally interrogated 
the hostages about their assets and the financial state of their 
families, in an effort to determine whether to demand ransom 
and how much. The hostages were released one month after 
their kidnaping without the payment of any ransom.!° 


plane crashed into the jungle. Three U.S. citizens flying with him 
were captured and held hostage by the group. 


CURRENT THREAT 


The collapse of communism and negotiations to settle major national- 
ist disputes, such as those in Ireland and Israel, have reduced or elim- 
inated the power of many traditional ideological and nationalist 
international terrorist groups. However, the threat of international ter- 
rorism remains real. For example, while PLO-affiliated groups 
reduced their international attacks after accepting the concept of coex- 
istence with Israel, the al-Aqsa Martyrs Brigades has launched suicide 
strikes within Israel, killing U.S. citizens and many Israeli noncombat- 
ants. An even greater threat is posed by the Palestinian terrorist 
groups HAMAS and the Palestine Islamic Jihad (PIJ). Dedicated to the 
destruction of Israel and hostile toward the United States, these radi- 
cal Islamic groups have mounted major suicide bomb attacks against 
Israel, claiming numerous American lives. In 2004 the FBI confirmed 
their “ongoing capability to launch terrorist attacks inside the U.S.” 
Historically, however, these groups have limited their militant activi- 
ties to Israeli targets and have reserved the United States for fundrais- 
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ing, recruitment, and procurement. Criminal investigations of these 
groups and Hizballah supporters have revealed extensive fundraising 
and support efforts in the United States, where the groups can count 
on the assistance of numerous sympathizers.'® 

Other groups such as the Tamil separatists of the LTTE, which has 
a large Canadian support network, possess operatives in or with easy 
access to the United States. The remnants of the Aum Shinrikyo 
group, while not reported to have a presence in the United States, are 
capable of attacking U.S. citizens in Japan and Russia. The United 
States must remain vigilant about such groups that currently exhibit 
the capability, if not intent, to attack the American homeland or U.S. 
citizens abroad. A change in U.S. policy or an internal strategic deci- 
sion could provide these groups with a new intent to attack suddenly 
and without warning. 

But the monitoring of intents and capabilities is made more challeng- 
ing by the evolving terrorist threat. As in the 1970s and ’80s, when ter- 
rorist groups with disparate ideologies cooperated in training and 
operations, and mirroring the cooperation of Islamic extremist groups, 
modern international groups appear to be sharing resources. For exam- 
ple, the Colombian government has asserted that at least seven mem- 
bers of the IRA have provided training to members of the FARC in areas 
such as advanced explosives and mortar techniques (three men with 
IRA links were arrested in Colombia; although these men were later 
acquitted, improvements in FARC tactics and other factors strongly sug- 
gest IRA assistance).!” Information flow on effective techniques may 
occur even without direct contact between groups. There are claims that 
al-Qaida sympathizers have received instruction in maritime terrorist 
techniques perfected by the Tamil separatists of the LTTE.'® 

Certain areas of the world have become petri dishes for terrorism, 
including the remote triborder region of Paraguay, Argentina, and 
Brazil. The U.S. military has reported this area serves as a support 
base for HAMAS, as well as the Islamic extremist groups Hizballah 
and Islamaya al Gama’at. “These organizations generate revenue in 
the triborder area through illicit activities that include drug and arms 
trafficking, counterfeiting, money laundering, forged travel docu- 
ments, and even software and music piracy. Additionally, these 
organizations provide safe havens and assistance to other terrorists 
that transit the region,” claimed one report to Congress.!? 
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PROFILES OF SIGNIFICANT 
INTERNATIONAL TERRORIST GROUPS 


For detailed information on significant terrorist groups see Appendix 1. 


CHAPTER SUMMARY 


Over the last three decades, the primary terrorist threat to the U.S. 
homeland from international terrorists has shifted from traditional 
groups motivated by ideological, nationalist, and state-sponsor goals 
to Islamic extremists. However, several nationalist and ideological 
groups, along with the remnants of the Aum Shinrikyo cult, maintain 
both a capability to strike U.S. citizens and a hostility toward U.S. 
policies. History also indicates the likelihood that additional interna- 
tional terrorist threats will emerge against the United States. 


CHAPTER QUIZ 


1. What is international terrorism? 


2. List two major international terrorist groups, other than al- 
Qaida, that have conducted support operations in the United 
States during recent years. 


3. Identify a major international terrorist group, other than al- 
Qaida, with the capability to attack U.S. citizens. 
4. What is narco-terrorism? 


5. Name a terrorist state sponsor that has dramatically reduced its 
support for terrorism in recent years and another that has not. 
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CHAPTER 


DOMESTIC TERRORIST GROUPS 
The Forgotten Threat 


This is the endgame for the animal killers and if you choose to stand with 
them you will be dealt with accordingly. There will be no quarter given, no 
half measures taken. 


Eco-Terrorist Statement Claiming Responsibility 
for a 2003 Bombing 


CHAPTER OVERVIEW 


Political protest is both a right and tradition of the American people. 
However, for certain groups protest has led to extremism, which has 
led, in some cases, to terrorism. Homegrown terrorists have fought 
for a wide range of right-wing, left-wing, nationalist, and special- 
interest causes. United by their disdain for the democratic system and 
choice of political violence as a tactic, they have made domestic ter- 
rorism by far the most frequent form of terrorist activity in modern 
U.S. history. 

Recent trends in domestic terrorism suggest a continuing level of 
violence employing sophisticated tactics that make detection and 
arrest more difficult. With a proven interest in WMD, domestic ter- 
rorists pose a significant threat to the U.S. homeland. 
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CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


Define domestic terrorism. 
Describe modern historical trends in domestic terrorism. 


Identify major extremist movements linked to modern domes- 
tic terrorism. 


4. Explain the threat raised by evolving characteristics of domes- 
tic terrorism. 


THE ENEMY WITHIN 


George Metesky was a quiet man. None of his neighbors suspected 
that he was responsible for a string of bombings that terrorized New 
Yorkers for 16 years. In January 1952, Metesky confessed to being the 
“Mad Bomber” and planting 32 bombs in New York, which injured 16 
people. Metesky was hardly an aberration. America has never been 
immune from the threat of political violence emanating from domes- 
tic sources, be they individuals like Metesky, or large organized 
groups. It is the kind of threat that will likely present itself again in 
the future. 


DEFINING DOMESTIC TERRORISM 


In contrast with Islamic extremist and international terrorism, which 
often occurs abroad under the direction of foreign leaders, domestic 
terrorism is usually conducted by U.S. citizens operating in their own 
country. The FBI defines domestic terrorism as “acts of violence that are 
a violation of the criminal laws of the United States or any state, com- 
mitted by individuals or groups without any foreign direction, and 
appear to be intended to intimidate or coerce a civilian population, or 
influence the policy of a government by intimidation or coercion, and 
occur primarily within the territorial jurisdiction of the United 
States.” 


Sauter ch04-08 3/20/05 11:49 PM Page 119 5 


CHAPTER 7 * DOMESTIC TERRORIST GROUPS 119 
THE INCIDENCE OF DOMESTIC TERRORISM 


Domestic terrorism has been the most common form of terrorism in 
the United States and until 9/11 was the most deadly. The FBI 
recorded 353 incidents or suspected incidents of terrorism in this 
country between 1980 and 2001; 264 of these incidents were attributed 
to domestic terrorists. Domestic terrorism cases nearly doubled from 
1999 to 2003 according to the Bureau.’ Between 1999 and 2001 alone 
the FBI prevented 10 possible domestic terrorist incidents, including 
two potentially large-scale, high-casualty attacks by right-wing 
groups.* 


ISSUE: 
WHAT IS THE LINE BETWEEN EXTREMISM AND TERRORISM? 


In July 1999, Benjamin Smith, a follower of the white suprema- 
cist World Church of the Creator (now known as The Creativity 
Movement) and its doctrine of racial holy war, launched a shoot- 
ing spree across Indiana and Illinois. His targets were Asians, 
Jews, and blacks; he killed two people and wounded nine more 
before committing suicide.” The next month Buford O. Furrow, a 
mentally disturbed racist with links to the Aryan Nations, 
walked into a Los Angeles—area Jewish community center and 
opened fire with an AR-15 rifle, wounding five people, including 
three children from the facility’s day-care center. After stealing a 
car, Furrow gunned down a Filipino-American postal worker, 
whom he considered a “target of opportunity” because he was a 
minority who worked for the federal government. Once 
arrested, Furrow reportedly announced he had wanted to send 
“a wake-up call to America to kill Jews.”° 

In both cases, the killers had longstanding ties to known 
extremist groups. But in neither case was there proof they had 
been acting as part of a plot. Such cases pose a serious challenge 
for those tasked with preventing domestic terrorism. It is a rare 
person who wakes up one morning and suddenly abandons a 
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mainstream life, picks up a gun, and begins killing for a political 
cause. In most cases, the killer has been associated with a politi- 
cal or ideological movement and moved, sometimes with others 
or the group as a whole, to the fringes of legal dissent, before 
making the leap from protest to terror. It is this connection 
between legitimate protest, extremism, and terrorism that has 
often challenged America’s response to domestic terrorism. As 
discussed earlier, during the 1960s and 70s, the FBI and U.S. 
intelligence community gathered vast amounts of information 
on demonstrators, extremists, and terrorists alike. Abuses by 
these agencies led to severe restrictions on domestic intelligence 
gathering. When those restrictions were linked to lapses in the 
investigation of al-Qaida before 9/11, domestic intelligence 
gathering capabilities were increased. 

Still, the American people are sensitive to law enforcement 
agencies investigating people “before the crime.” Yet evidence 
shows that both deranged individuals and terrorist cells some- 
times rely on legal extremist groups for inspiration and support, 
in some cases given unwittingly, in such areas as fundraising, 
recruiting, communications, and intelligence. Christian Identify 
and other white supremacist groups are often accused of using 
their propaganda to incite violence. In a similar way, environ- 
mental extremist groups list suggested targets and methods for 
“direct action” information on their Internet sites. Pro-life 
extremists go so far as to post online detailed instructions on how 
to create an explosive device that can foil the fire suppression sys- 
tems at abortion clinics. Yet these groups often ensure their activ- 
ities do not cross the line into conspiracy or other criminal areas. 

The Southern Poverty Law Center decided to take its own steps 
to stop what it considers dangerous racist groups. It has filed mul- 
timillion dollar lawsuits against them. One example involved a 
group called the White Aryan Resistance (WAR). In 1988 WAR 
assigned a follower to help organize a group of neo-Nazi skin- 
heads in Portland. After being trained, the group killed an 
Ethiopian student, gaining praise from WAR’s leader for doing 
their “civic duty.” A jury decided WAR’s leader bore partial 
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responsibility for the killing and awarded millions of dollars in 
damages to the victim’s family. The center also won a major neg- 
ligence suit in 2000 against the Aryan Nations, whose current and 
former members and supporters, such as Buford Furrow, have 
been involved in numerous terrorism and hate crime cases. 


1. Where is the line between free speech and supporting a ter- 
rorist group? 

2. What are appropriate ways for the government to prevent 
extremist organizations from crossing the line and providing 
assistance to terrorist groups? How far should the govern- 
ment be able to go in collecting intelligence on extremists 
with no documented connection to terrorist activity? 


3. What are suitable roles for citizens and private organiza- 
tions in taking action against extremist groups? 


PREVALENCE OF DOMESTIC TERRORISM 


Social and political changes after World War II fermented domestic 
terrorism across the ideological spectrum. The notorious Ku Klux 
Klan (KKK) was reinvigorated by adherents determined to halt the 
progress of the civil rights movement. The racist Klan terrorized 
activists throughout the South, spreading fear by the glow of their 
flaming crosses. In 1963, Klansmen bombed a Birmingham, 
Alabama, church, murdering four teenagers. Klan beatings and 
floggings continued throughout much of the 1960s. At the same 
time, more seeds of domestic ideological terrorism were being sown 
in the movement against the Vietnam War. The left-wing Weather 
Underground Organization (WUO) emerged in 1970 from the 
fringes of the peaceful antiwar movement. In the next few years the 
group set off blasts at often empty locations from Harvard 
University to the U.S. Capitol. A murderous WUO plan to bomb a 
dance at Fort Dix, New Jersey, derailed when several terrorists blew 
themselves up by accident. In the aftermath of that blast, many 
members dropped political violence, while others went on to sup- 
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port terrorist activity by new communist and black “liberation” 
extremist groups. 

Nationalist groups also terrorized the United States. Puerto Rican 
extremists, acting in the tradition of their radical forebears who had 
attacked the Congress and tried to kill President Truman in separate 
incidents during the 1950s, took up arms. The FALN, a Spanish 
acronym for the Armed Forces of National Liberation, and Los 
Macheteros demanded independence for the U.S. Commonwealth. 
They blasted and robbed their way through the 1970s and ’80s, claim- 
ing responsibility for such attacks as the January 1975 bombing of the 
historic Fraunces Tavern in downtown New York, which cost four 
lives. (Many of their members were eventually arrested and later 
given clemency by President Bill Clinton in 1999; a number of the 
1950s Puerto Rican terrorists had been freed by President Jimmy 
Carter some 20 years before.) 

The FBI, CIA, and other government agencies employed aggres- 
sive intelligence gathering and covert tactics to crack down on 
domestic terrorist groups. By the 1980s, with the collapse of the leftist 
United Freedom Front (UFF), most nationalist and left-wing ideolog- 
ical terrorist groups in the United States were finished. Their place 
was taken by right-wing extremism. The Order, a faction of the Aryan 
Nations, seized national attention during the 1980s. The tightly 
organized racist and anti-Semitic group opposed the federal govern- 
ment, calling it the “ZOG,” or Zionist Occupation Government. 
Taking a page from The Turner Diaries, which inspired the group, 
Order terrorists engaged in bombings, counterfeiting, robberies, and 
murder. Their attempt to inspire a race war failed, and the group’s 
leader was killed in a 1984 shoot-out with authorities. 

Crimes of The Order brought attention to a loose network of right- 
wing extremists across the United States. United by a hatred of the 
U.S. government and minority groups, these groups continued to 
grow into the 1990s. Bloody government standoffs at the Ruby Ridge, 
Idaho, home of a suspected right-wing extremist in 1992 and the Waco, 
Texas, compound of a religious cult in 1993 became defining events 
and rallying cries for extremists and antigovernment “militia move- 
ments.” A series of attacks followed. In 1995, Timothy McVeigh, a dec- 
orated Army veteran of the Gulf War with extremist views, used a 
truck bomb to kill 168 victims at the Alfred P. Murrah Federal Building 
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Left-Wing 
Extremists 


in Oklahoma City. The next year a bomb exploded during the Atlanta 
Olympics; federal authorities accused extremist Eric Rudolph with 
that and other crimes, including a deadly attack on an abortion clinic. 
Rudolph managed to escape arrest for years and served as an inspira- 
tion for many extremists. Followers of the paramilitary militia planned 
to attack Fort Hood, Texas, on July 4, 1997, before they were arrested. 
In 1999 law enforcement officials arrested right-wing extremists who 
planned to use an ammonium nitrate fuel oil (ANFO) bomb to deto- 
nate a facility in California that held millions of gallons of liquid 
propane. Provoking a government crackdown, civil war, and the end 
of the federal government was their alleged movement.” 

The 1990s also saw significant activity by special-interest terrorist 
groups. The fringes of the pro-life movement produced terrorists who 
were willing to kill in order to stop what they believed to be the mur- 
der of unborn children during abortions. Ecoterrorists, fighting for 
environment preservation and animal rights, caused huge amounts of 
property damage. By 2004 these groups had become among the most 
active terrorist groups in the nation and showed signs of turning to 
violence. 


PROFILES OF SIGNIFICANT DOMESTIC 
TERRORIST GROUPS AND EXTREMIST MOVEMENTS 


Many terrorist groups have drawn psychological sustenance, recruits, 
funds, and operational support from the fringes of legitimate protest 
groups. The following profiles include some references to certain hate 
groups or other organizations that, while they may have been linked 
to terrorists, are themselves legal enterprises. 


As a significant force, communist terrorist groups have disappeared 
in the United States. Some of their anticapitalist principles have been 
picked up by anarchists, such as those who rampaged during the 
1999 World Trade Organization (WTO) meeting in Seattle. In contrast 
with the large numbers of peaceful protestors at the WTO and subse- 
quent gatherings, and often in opposition even to those practicing 
peaceful civil disobedience, “black bloc” anarchists, named for their 
black garb, engage in rioting, property destruction, and fighting with 
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police. The FBI asserts these groups “represent a potential threat in 
the United States.”® 


Separatist: Black 


The New Black Panther Party for Self-Defense, linked to former mem- 
bers of the Nation of Islam, advocates a radical black nationalist 
agenda with racist and anti-Semitic elements. While the group has 
threatened violence, it cannot be considered a terrorist group. The 
earlier “black liberation” movement, allied with leftist terrorist 
groups during the 1970s, suffered a similar demise. Former Black 
Liberation Army member Joanne Chesimard, aka Assata Shakur, 
remains a fugitive in Cuba after escaping from prison, where she was 
serving a sentence for her part in the murder of a New Jersey police 
officer in 1973. Also reported in Cuba are Michael Robert Finney and 
Charles Hill, members of the black militant group Republic of New 
Africa, who allegedly hijacked a plane after murdering a New Mexico 
state police officer. (Gee Chapter 6 for information on Cuba’s support 
of leftist and Puerto Rican terrorists in the United States.) 


Separatist: Puerto Rican 


Los Macheteros and the FALN also reduced their activities in recent 
years, especially against targets in the United States. However, law 
enforcement officials have linked separatist terrorists to several 
bombings in Puerto Rico during recent years. 


A widespread and overlapping set of beliefs, groups, and individuals, 
the extreme right wing in the United States is estimated at up to 25,000 
extremists and 250,000 sympathizers, although the exact number is 
impossible to determine.’ Their precise ideological perspectives vary, 
although many agree with al-Qaida that the U.S. government is cor- 
rupt, its people morally weak, and its agenda set by Jewish Americans 
and Israel. Several major movements make up this population, which 
is divided into hundreds of groups and splinter organizations. 


Christian Identity 


The Christian Identity movement is the significant ideological force 
among the extreme right wing. Based on a decades-old idea imported 
from Britain, the faith asserts that Aryans (non-Jewish people of 
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European descent) are a lost tribe of Israel and God’s chosen people. 
Believers are united in a hatred of Jews, blacks, and other minori- 
ties—often described as soulless “mud people.” Many Christian 
Identity adherents, estimated to number 25,000 or slightly more, 
anticipate the imminent arrival of Armageddon and a major race 
war.!° A relatively new splinter ideology called the Phineas 
Priesthood represents those who assume the mission of attacking 
abortionists, homosexuals, and race mixers. 

The Christian Identity philosophy unites a number of groups and 
also informs the belief system of groups such as the Neo-Nazi 
National Alliance, started by the late William Pierce, author of The 
Turner Diaries. The National Alliance, with international ties and 
sophisticated recruitment techniques, is regarded as America’s most 
powerful hate organization. The group’s members and sympathizers 
have been linked to numerous violent acts. 


Militia Movement 


Known for their belief in “black helicopters” and other conspiracy the- 
ories, militia members gained widespread publicity in the 1990s after 
the Waco and Ruby Ridge incidents. The militia movement believes the 
federal government is attempting to repeal constitutional rights, espe- 
cially those involving the right to own guns. Organized into paramili- 
tary groups, many militia followers are convinced that UN and foreign 
troops are being introduced into the United States as part of the “New 
World Order.” These beliefs have lead to a number of terrorist plots. 


Ku Klux Klan (KKK) 


Once a powerful force in post—Civil War America, and again a feared 
movement during the civil rights era, the KKK has become a frag- 
mented set of competing organizations united by their hatred of 
blacks, Jews, and assorted other enemies. They still maintain the 
capability for violence. In early 2003, an Imperial Wizard of the White 
Knights of the Ku Klux Klan was arrested on weapons charges." 


Sovereign Citizens 


Groups such as the Montana Freeman and Republic of Texas have 
adopted what one observer called a “right-wing anarchist” philoso- 
phy. They reject the legitimacy of federal, state, and local government 
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institutions based on convoluted interpretations of the Constitution, 
legal system, and American history. These extremists are known for 
harassing local government officials and have resorted to violence. 


Other Right-Wing Extremist Groups 


Groups that follow one or more right-wing extremist movements 
include the Nazi Low Riders, originally linked to the racist Aryan 
Brotherhood prison gang; the Creativity Movement, active under a 
different name in the 1990s; the Aryan Nations; and racist skinheads 
such as the Hammerskin Nation. The far right also includes Neo- 
Confederates, who seek a return to the social norms of the 
Confederacy; Orthodox Christians, who promote biblical standards 
and punishments as the law. 


Along with those who claim Christianity condones terrorism and 
American Islamic extremists who have supported foreign terrorist 
groups, the Jewish Defense League (JDL) has a long history of attack- 
ing those it believes are opposed to its faith, the State of Israel, and the 
Jewish people. In 2003, a member of the JDL pleaded guilty in a plot 
to bomb a California mosque and the field office of a U.S. congres- 
sional representative.” 


Issue-oriented groups occupy the extreme fringes of legitimate polit- 
ical movements pursuing pro-life, environmental, animal rights, and 
other causes. 


Pro-Life 

In their desire to stop abortion, some extremists have moved beyond 
protest, past civil disobedience, and into murder and terrorism. A 
number of them have operated in the name of the Army of God. The 
organization maintains a Web site; its overt supporters praise vio- 
lence but stop short of illegal threats. In addition, supporters have 
created an Army of God manual with instructions for sabotaging and 
blowing up abortion clinics. 

One pro-life terrorist was Clayton Waagner, a convicted felon with a 
fondness for casinos, cigarettes, and Crown Royal bourbon.!° Waagner 
escaped from jail in 2001 and set out to terrorize abortion providers. In 
June 2001, Waagner began threatening specific abortion clinic staffers 
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and posted a message on the the Army of God Web site announcing, 
“Tam going to kill as many of them as I can.” He also sent hundreds of 
letters to abortion clinics. On many of the envelopes was typed the 
phrase: “Time Sensitive Security Information, Open Immediately”; 
inside was white powder purported to be anthrax. Sent soon after the 
real anthrax attacks of fall 2001, these hoax letters spread fear across the 
nation.!* Waagner was later captured and sent to prison. Antiabortion 
extremists have also assassinated abortion providers. 


FROM THE SOURCE: 
THE ARMY OF GOD MANUAL 


The follow excerpts are from a manual used by this extremist 
pro-life group. 


[C]overt applications of disguises is [sic] also important. 
Street Man Recon is dressing up as a street person, with really 
scruffy clothes, empty beer cans in paper bags sticking out of 
the pockets of a filthy trench coat, etc. Such people not only 
are eminently forgettable, they tend to drive the attention of a 
casual observer away from them. This is what you want. You 
can stagger your way through a strip mall or medical com- 
plex in the middle of the night and be ignored or forgotten by 
anyone who sees you. Then, having done recon to ensure no 
witnesses, empty building, access to target roof, etc., you can 
either return another night or strike quickly, only to leave 
again, not running, but slowly staggering away ... 

These days, the typical death camp [abortion clinic] is 
often a veritable fortress, complete with lots of brick, bars, 
reinforced glass, surveillance cameras, etc. etc. ad nauseum. 
This description is particularly true of many of the Hoods 
(Planned Parenthoods, that is). The main reason for this is 
that they are self-insured. 

By far the most important security device in the arsenal 
of these hoodlums is their Halon Fire Prevention System. In 
order to properly terminate a product of construction of this 
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type, high explosives are not needed. However, introducing a 
flammable and igniting it is not sufficient since the Halon 
System is designed to deplete oxygen from the inside of the 
building . . . Remember for those not using time delay devices, 
fuses are not all created equal, so pre-test whichever variety 
you use. Defenders of life with easy access to quality fusing 
should spread the wealth around since it is not contraband. 


Eco-Terrorism 


While many Americans support environment protection and oppose 
cruelty to animals, a significant number of extremists believe society 
has not gone nearly far enough in these areas. The FBI estimates such 
radicals have committed more than 1,100 criminal acts in the United 
States since 1976, causing at least $110 million in damages. 

For example, the Earth Liberation Front (ELF) demands an end to 
environment damage. The group became known for “monkey- 
wrenching,” or sabotage of organizations seen to be damaging 
nature. Monkeywrenching started with tree spiking and destruction 
of logging equipment, but arson has now become a key tactic for ELF- 
related terrorists. Targets have included auto dealerships selling sport 
utility vehicles, construction sites, and even fast-food restaurants. The 
August 1, 2003, arson of a La Jolla, California, condominium complex 
cost an estimated $50 million in property damages, according to the 
FBI.!6 A Colorado arson attack in 1998, which caused $12 million of 
damage at the Vail ski resort, was in retaliation for an expansion that 
destroyed habitat for the lynx.” 

Founded in Great Britain, the Animal Liberation Front (ALF) aims to 
stop what it considers the exploitation of animals, which includes med- 
ical testing involving animals and the fur trade. While it claims to repu- 
diate acts that could harm “any animal, human and nonhuman,” the 
group encourages its members to take “direct action,” which might 
involve attacks on targets such as fur companies, mink farms, restau- 
rants, and animal research laboratories. However, there are significant 
concerns the eco-terrorist movement is slipping toward violence. 
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Loose 
Affiliations, 
“Leaderless 
Resistance,” and 
Lone Wolves 


A group linked to ALF is Great Britain’s Stop Huntingdon Animal 
Cruelty (GHAC) organization, which is dedicated to stopping animal 
testing by a company called Huntingdon Life Sciences (HLS). 
According to the FBI, “Investigation of SHAC-related criminal activ- 
ity has revealed a pattern of vandalism, arsons, animal releases, 
harassing telephone calls, threats and attempts to disrupt business 
activities of not only HLS, but of all companies doing business with 
HLS.” In 2003, terrorists exploded bombs at two California compa- 
nies linked to HLS. The second blast was followed by a claim of 
responsibility from the Revolutionary Cells of the Animal Liberation 
Brigade. The claim stated, “Now you will all reap what you have 
sown. All customers and their families are considered legitimate tar- 
gets .. . You never know when your house, your car even, might go 
boom ... Or maybe it will be a shot in the dark . . . We will now be 
doubling the size of every device we make. Today it is 10 pounds, 
tomorrow 20... until your buildings are nothing more than rubble. It 
is time for this war to truly have two sides. No more will all the killing 
be done by the oppressors, now the oppressed will strike back.”18 

Recently an intellectual leader of the eco-terrorist movement has 
called for a gradual shift to violent tactics in order to achieve their 
goals. Were these extremists to adopt violence, they would be espe- 
cially difficult to stop. Eco-terrorists share a highly decentralized 
operating system that includes high levels of focus on operational 
security and knowledge of law enforcement techniques. Their attacks 
are well planned, and they share their tactics via the Internet. 


EVOLVING THREAT 


In contrast with its early days, when dogmatic Marxist groups prose- 
lytized via pamphlets and Klansmen recruited under flaming crosses, 
the modern domestic terrorist threat has adopted advanced organiza- 
tional and operational techniques that make it increasingly insidious. 


Domestic terrorists from various groups have demonstrated an ability 
to work by themselves or in small groups. In right-wing extremist 
vernacular, they can operate as “leaderless resistance,” operating 
from general instructions or directives, perhaps spread via Web sites. 
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Such small cells are difficult to detect and stop. In some cases, hate- 
ful ideologies may inspire action from disturbed individuals. For 
example, a 35-year-old member of the National Alliance was 
arrested in 2002 as he sat outside a Jewish preschool in Nashville 
holding an AR-15 rifle. In his car officials found a semiautomatic 
handgun with 27 rounds of armor-piercing ammunition, binoculars, 
laser range finder, retractable steel baton, and latex gloves. A search 
of his residence, a storage facility, and a buried supply cache turned 
up explosive devices, time fuses, ammo, smoke grenades, blasting 
caps, military training manuals, and a copy of the The Turner Diaries. 
The man, who had cheered when 9/11 occurred, had written an e- 
mail stating, “I no longer feel like I belong to the cesspool of multi- 
cultural filth known as the ‘United States,’ ” investigators reported. 
Authorities found evidence the extremist had searched the Internet 
for information on Buford Furrow and feared he planned to gun 
down Jewish children in an attack similar to Furrow’s 1999 ram- 
page. The extremist, who defenders claimed was mentally ill, pro- 
vided information that led to the arrest of another white 
supremacist and had allegedly been in contact with a National 
Alliance official. 1? 


Because of their religious views, some right-wing extremists—like al- 
Qaida—appear to lack constraints against the use of WMD. They may 
view such attacks as likely to kill unbelievers and minorities and an 
effective way to provoke a theologically sanctioned civil war. 
Domestic terrorists have a record of obtaining WMD elements. 
During the 1990s, law enforcement officials arrested extremists with 
the poison ricin on at least two occasions. In 2003, officials found the 
materials for a cyanide bomb, along with half a million rounds of 
ammunition, pipe bombs, machine guns, silencers, and extremist lit- 
erature, in the storage unit of William Krar in Noonday, Texas. 
Although Krar was known for his antigovernment views and one of 
his accomplices in a fake ID scheme was a militia member, he denied 
being part of a terrorist plot, saying, “For the record, I’m neither nor 
a terrorist or a separatist. I’ve never desired to hurt anyone or the 
country that I love.” However, some observers recalled the 1985 
raid on a right-wing extremist group called The Covenant, the Sword, 
and the Arm of the Lord (CSA). Inside the group’s Arkansas com- 
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pound, officials discovered a 30-gallon drum of cyanide, which the 
members planned to place in the water supplies of major cities as part 
of a Christian Identity—inspired plot.”! 


CHAPTER SUMMARY 


American extremist movements provide the foundation for terrorist 
groups representing a broad range of motives. These terrorists, espe- 
cially those representing right-wing extremist and eco-terrorist 
causes, will continue to pose a substantial threat to the homeland. 
Because of the decentralized organizational structure of these groups, 
and the desire of some of them to obtain WMD, law enforcement offi- 
cials must maintain a high level of vigilance. 


CHAPTER QUIZ 


1. What is domestic terrorism? 
2. How did domestic terrorism evolve from the 1970s to present? 


3. What are three major extremist movements linked to modern 
domestic terrorism? 


4. List the evolving threats posed by modern domestic terrorism. 
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TERRORIST OPERATIONS 
AND TACTICS 


How Attacks Are Planned 
and Executed 


. . . the dialogue of bullets, the ideals of assassination, bombing, and 
destruction, and the diplomacy of the cannon and machine-gun. 


“Military Studies in the Jihad against the Tyrants” 
(The al-Qaida Manual) 


CHAPTER OVERVIEW 


While the ideologies of terrorist groups may vary, they often employ 
many common tactics and weapons. This chapter outlines the most 
common ways terrorists organize themselves and conduct their oper- 
ations. Organizational structures significantly affect the conduct of 
modern terrorist activities. While the range of potential terrorist 
activities is vast, certain common organizational principles are used 
to prepare and conduct most operations, whether they target govern- 
ment buildings with plastic explosives or key computer systems with 
cyberattacks. Understanding these basic principles, tactics, and 
weapons is a key step toward preventing and responding to terrorist 
attacks. 

Technology also plays an important role in understanding the 
nature of the modern terrorist threat. The instruments used by ter- 
rorists have evolved with emerging technologies. In ancient times, 
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terrorists struck with daggers, stabbing their victims in public mar- 
kets to spread fear. The development of modern explosives allowed 
extremists to attack with far greater impact, a trend being accelerated 
by the increasing sophistication and availability of automatic 
weapons, plastic explosives, missiles, and WMD. Technology has also 
created entirely new venues for terrorism: jet airliners opened the 
way for hijackings, and the Internet created a new battleground in 
cyberspace. Other new technologies such as advanced communica- 
tions systems enabled terrorists to disperse their operations while still 
maintaining command and control. Technological forces, exacerbated 
by the rise of extremist groups bent on achieving significant casual- 
ties, are combining to make terrorist attacks increasingly lethal. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


Identify common organizational features of terrorist groups. 
Explain the major tactical phases of a terrorist operation. 
Describe considerations used by terrorists in selecting targets. 


oe NS 


List common terrorist tactics. 


TERRORIST PLANNING 


Terrorist groups typically function based on a hierarchy of planning 
levels. Each group has a driving ideology—a top-level orientation, 
such as religious or racial extremism, from which the organization 
generates strategic objectives. These objectives have ranged from 
forcing the withdrawal of the United States from the Middle East to 
sparking a race war in America. To pursue its goal, the group devel- 
ops a plan, which focuses resources to achieve specific results. Plans 
are driven by doctrine, or the basic principles that guide operations. 
On the level of specific missions, terrorist units use tactics, or prac- 
ticed actions relating to the group and its adversary, which are built 
upon the individual skills possessed by members of the group. 
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Terrorism by 
the Book 


In the 1980s, state sponsors such as the Soviets, Cubans, and 
Palestinians, who trained large numbers of terrorists during the Cold 
War, and the Iranians, who influenced terrorist groups in later years, 
refined the concepts for adopting terrorism to the realities of a glob- 
alizing world. Their students performed on an international stage; 
interested parties could study the attributes of successful attacks, and 
learn the lessons of failed ones, from the nearest television or news- 
stand. Behind the scenes, counterterrorism officials could also trace 
the dissemination of sophisticated techniques, such as advanced 
bomb-making skills, from one group to another. 

Soviet and Western military doctrine, detailed in widely available 
manuals, provided many of these groups with a fundamental under- 
standing of military tactics and skills that could be used for terrorism. 
From these and other sources, specific terrorist texts evolved. 
Minimanual of the Urban Guerilla, written by a South American revo- 
lutionary, detailed tactics for communist guerillas attacking U.S.-sup- 
ported nations. These tactics were emulated by terrorists in the 
Americas and Europe, among other locations. 

At home, The Anarchist’s Cookbook—with its detailed instructions on 
topics such as explosives, lock picking, and document fraud—has been 
associated with numerous extremists. Right-wing radicals have closely 
studied The Turner Diaries, a novel in which racists take over the United 
States. The book, with detailed descriptions of terrorist operations, was 
cited as an inspiration by Timothy McVeigh, who bombed Oklahoma 
City’s Murrah Federal Building in 1995, and other domestic terrorists.! 

One of the most important terrorist documents today is “Military 
Studies in the Jihad against the Tyrants,” also known as the al-Qaida 
manual. Found in the British residence of a suspect in al-Qaida’s 1998 
bombing of the U.S. embassies in Africa, it was translated and intro- 
duced into evidence at a federal court. Reflecting lessons from decades 
of jihadist combat in the Middle East, it probably also represents the 
influence of a burly al-Qaida terrorist named Ali Mohamed. Trained 
by the U.S. military in Special Forces tactics while an Egyptian military 
officer, Mohamed served as a sergeant in the U.S. Army during the late 
1980s, teaching troops at Fort Bragg, North Carolina, about the Middle 
East. During this time Mohamed was also an al-Qaida operative, and 
before his eventual capture, he translated U.S. military manuals and 
provided advanced special operations—type training to the group.” 
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Successful terrorist operations require a broad range of talents. Most 
members of a terrorist group have only limited capabilities; none has 
all the skills needed. These competencies include ideology /religious 
knowledge; weapons; explosives; small unit tactics; intelligence tech- 
niques or tradecraft such as clandestine communication and dis- 
guises; counterintelligence; codes and ciphers; map reading; 
sabotage; surveillance and countersurveillance; photography; docu- 
ment falsification; foreign languages; propaganda; medicine/first 
aid; the operation of aircraft, automobiles, and watercraft; target 
selection and assessment; and hand-to-hand combat. 

Modern terrorist groups include personnel capable of using a 
range of weapons. In the case of domestic and international terrorist 
groups that threaten the United States, this arsenal includes auto- 
matic weapons such as the M-16, M-60, AK-47, G-3, and Uzi; hand- 
guns; shotguns; man portable air defense systems (MANPADS) 
rocket-propelled grenades (RPGs); explosives such as dynamite, C-4 
and other plastic explosives, improvised explosives, and detonation 
cord and various detonators; grenades; knives and other edged 
weapons; explosive suicide belts and vests; clubs; garrotes; martial 
arts weapons; mace; fire bombs; and improvised poisons and chemi- 
cal agents. 


THE TERRORIST ORGANIZATION 


Dramatic offensive operations are what get the terrorists the publicity 
they desire. But it is secrecy that allows them to survive. Because they 
usually operate in hostile environments against far more powerful 
conventional forces, terrorist groups must focus on maintaining secu- 
rity. For a terrorist, detection usually means defeat. 


Security often begins with a command-and-control organization and 
a group leader located far from the field of operations. Modern tech- 
nology such as satellite phones and the Internet have made it easier 
for commanders in a relatively secure area to direct operations in a 
more dangerous one. Often led by a charismatic individual with 
extensive training, the group may also use committees and subcom- 
mands to coordinate action. 
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Types of 
Followers 


Cell Structure 


In some cases, terrorist movements may even forgo centralized 
leadership. Operatives in related groups, or even individual free- 
lancers, may initiate attacks on behalf of the larger group. Individual 
radicals may adopt the practice of “leaderless resistance,” forming 
tiny independent cells and conducting their own attacks in response 
to inspirational messages and strategic guidance conveyed via Web 
sites, e-mail, and books. 


Participants in the organization may fall into several categories as 
depicted in Figure 8.1. Hardened operatives known as cadre carry out 
terrorist operations and attacks and train others. Those who can be 
termed active supporters may not participate in attacks, but do know- 
ingly provide intelligence and logistical support to operations. Passive 
supporters are sympathizers to the cause, but restrict their support, 
perhaps by joining and contributing to legal front groups. The Turner 
Diaries divides terrorists into “illegals,” who are known to the authori- 
ties as operatives and operate underground with the mission of con- 
ducting direct attacks, and “legals,” who may portray themselves as 
law-abiding activists while at the same time supporting a terrorist 
group by providing propaganda, legal defense, funding, intelligence, 
and the initial screening of potential recruits. Terrorists often move 
through these categories, starting by joining legal extremist groups and 
gradually becoming more radical until they are selected for member- 
ship in the terrorist organization. The overlap between the far fringes 
of legal extremist groups and terrorist groups can create special chal- 
lenges for law enforcement officers, who must monitor and prevent ter- 
rorist activity without violating the civil liberties of legitimate 
protestors. 


In order to maintain security, the groups often organize themselves 
into cells, small units of several individuals with specific missions. 
The members of one cell may never meet those in another. This pre- 
vents a single individual from knowing the identities or operations 
of the larger group, limiting the damage if the individual is cap- 
tured. 

Cells can be divided into a number of categories: 


e Operational. Carries out missions 
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FIGURE 8.1 


CLASSIC CATEGORIES OF TERRORIST GROUP AND 
SUPPORT MEMBERSHIP. IN MODERN TERRORISM, 
LOOSELY AFFILIATED SUPPORTERS MAY TAKE DIRECT 
ACTION AS PART OF “LEADERLESS RESISTANCE.” 


Leadership 


Operatives: 
“illegals” 


Active supporters: “legals” 


Passive supporters: sympathizers 


e Intelligence. Collects information through surveillance and other 
methods 


e Logistics/auxiliary. Supports operations with funds, supplies, 
weapons, housing, and other needs 


e Sleeper. A common term most often used to describe cells of trained 
operatives waiting underground for orders to carry out a mission 


One essential tool for terrorists is preventing intelligence and law 
enforcement from uncovering information about their organization 
and operations. “Married brothers should observe the following,” 
instructs the al-Qaida manual, “not talking to their wives about 
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Jihad work . . .” The manual also includes detailed instructions on 
the use of countersurveillance, codes, and cover stories to avoid 
detection. Iyman Faris followed many of these precepts of opera- 
tional security. While his wife and neighbors in Ohio knew him as a 
family man and truck driver, the naturalized U.S. citizen with the 
gleaming smile was actually an al-Qaida operative. Born 
Mohammad Rauf in Kashmir in 1969, Faris—who reportedly held a 
license to transport hazardous materials—drove his rig across the 
country delivering cargo to businesses and airports. He also found 
time to visit Pakistan and Afghanistan, where he met Usama bin 
Ladin, joined the jihad against America, and began working with 
al-Qaida’s top operational leaders, according to court documents 
filed by U.S. authorities. 

Along with a scheme to bring down the Brooklyn Bridge and an 
alleged role in supporting a plot to bomb an Ohio shopping mall, Faris 
was asked to obtain tools to derail trains. These tools were code- 
named “mechanics shops” in e-mail messages between Faris and al- 
Qaida, according to court documents. The plans hit a roadblock 
during a 2003 reconnaissance operation in New York, when Faris spot- 
ted the tight security surrounding the Brooklyn Bridge. He e-mailed 
his leaders that “The weather is too hot,” indicating the plot could not 
succeed because of the bridge’s security and structure. But in this case, 
al-Qaida security procedures were not strong enough. Before he could 
launch an attack, Faris was arrested, reportedly tripped up when his 
e-mail messages to al-Qaida were found in the computer of a captured 
terrorist. He ultimately pled guilty to terrorism-related charges.’ 


TERRORIST SUPPORT OPERATIONS 


A horrific explosion is over in seconds. A hostage situation usually 
lasts days at most. But the activities needed to generate and sup- 
port such terrorist operations require months or years of effort. 
These activities include recruitment and indoctrination; network 
building; training; logistics, supply, and communication; and prop- 
aganda and psychological operations. They are what make the 
group an ongoing enterprise and provide the foundations for 
actual attacks. 
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PART 2 • UNDERSTANDING TERRORISM 
PHASES OF A TERRORIST ATTACK 


Most terrorist attacks involve common phases that take an operation 
from the first steps of target selection to the final phases of reviewing 
an attack and determining lessons learned for future operations. 


Terrorist groups have thousands of potential targets. Based on their 
strategy, they identify and strike specific ones. While each attack is 
unique, common factors inform the target selection process of many 
terrorist organizations. Because their general aim is to attack one 
group of people in order to influence others, their objectives are often 
selected for their symbolism or other factors that make them high- 
value targets. 

The principle of symbolic value accounts for the disproportionate 
number of attacks on American citizens, who represent a system 
hated by a wide range of terrorists; on embassies, which symbolize 
the nations whose diplomats they house; and against national air- 
lines, which bear flags, crews, and passengers of target nations. 
Among domestic terrorists, government offices—such as the 
Oklahoma City building that represented the federal government 
Timothy McVeigh so detested—are often on target lists. In the 9/11 
attacks, al-Qaida believed the World Trade Center represented the 
U.S. economy; the Pentagon, the U.S. military; and the Capitol, U.S. 
support for Israel. 

Once terrorists have identified potential high-value targets, they 
assess their vulnerabilities, such as the lack of defensive measures, 
and tactical characteristics, such as the ease of escape offered by 
nearby roads. Locations with limited defenses are called soft targets. 
Some locations are both high-value and soft targets. For example, in 
2003, terrorists, apparently acting independently, attacked 
McDonald’s restaurants across the globe. Assailants from various dif- 
ferent groups but with a common aversion to this American icon 
threw a hand grenade at a Greek restaurant; tossed a Molotov cock- 
tail into a Norwegian outlet; left a time bomb under the table in one 
Turkish McDonald’s and bombed two others; hurled a fire bomb at a 
Saudi restaurant; used TNT to blow up the men’s room in a Lebanese 
restaurant; set fires outside restaurants in Germany and France; and 
exploded a bomb near an Argentine restaurant.“ 
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Operational 
Phases 


Many other factors impact target selection, such as timing. The 
periods before elections, or during important holidays and anniver- 
saries, may add psychological value. The previous history of a target 
may be important: terrorists failed to destroy the World Trade Center 
on their first try in 1993 and so returned to finish the job in 2001. In 
other cases, the symbolic value of a target may be combined with its 
functional value, as when attackers seek to inflict not just psycholog- 
ical but economic or military damage as part of their strategy. 


Once the target is selected, the attack is planned and conducted through 
a series of phases. First, the group gathers intelligence and conducts 
reconnaissance activities. This is followed by operational planning of 
the attack; recruitment of specialized personnel; surveillance on the tar- 
get; countersurveillance to ensure the plotters have not been detected; 
rehearsals and dry runs; training for specific elements of the attack; 
movement to the attack; the attack itself; escape and/or exfiltration from 
the site; exploitation of the attack through propaganda or intelligence 
techniques; and after-action reviews (for example, the al-Qaida manual 
includes numerous detailed critiques of botched attacks). 


FROM THE SOURCE: 


THE AL-QAIDA MANUAL ON 
SURVEILLANCE OF A FIXED TARGET 


Surveillance, Intelligence, and Observation (Information about 
the enemy places) 


The Organization’s command needs detailed information 
about the enemy’s vital establishments, whether civilian or 
military, in order to make safe plans, reach firm decisions, 
and avoid surprises. Thus, the individual who gathers 
information about a desired location should, in addition to 
drawing a diagram, describe it and all its details. 


The Drawing: The brother [brother is how the terrorists refer to 
one another] should draw a diagram of the area, the street, 
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and the location which is the target of the information gath- 
ering. He should describe its shape and characteristics. The 
drawing should be realistic so that someone who never saw 
the location could visualize it. It is preferable to also put on 
the drawing the directions of traffic, police stations, and 
security centers. 


The Description: It is necessary to gather as much information 
about the location as possible. For instance: 


Traffic directions and how wide the streets are 

Transportation leading to the location 

The area, appearance, and setting of the place 

Traffic signals and pedestrian areas 

Security personnel centers and government agencies 

Embassies and consulates 

The economic characteristics of the area and traffic con- 
gestion times 

Public parks 

Amount and location of lighting 


It is preferable to photograph the area as a whole first, 
then the street of the location. If possible, panoramic pictures 
should be taken . . . The photographer should be experienced 
with and proficient in film processing and developing. It is 
risky to use an outside film processing service . . . 


TERRORIST OPERATIONS 


The variety of terrorist operations is limited only by the imagination 
and resources of terrorists. Al-Qaida operatives’ brainstorming for the 
9/11 attacks included hijacking up to 10 planes and crashing some of 
them into nuclear reactors.° But certain operations have become espe- 
cially frequent and successful components of the terrorist repertoire. 
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Ambushes 


Sabotage 


Kidnappings 


The ambush, a surprise attack from a concealed position on a moving 
or temporarily halted target, is a common military tactic that has 
often been used by terrorists abroad. In early 2003, a Kuwaiti civil ser- 
vant ambushed a vehicle carrying U.S. civilian contractors outside 
Camp Doha, Kuwait. The attacker, who claimed inspiration from al- 
Qaida, killed one American and wounded another.® The al-Qaida 
manual includes instruction on ambushes and suggests blocking the 
victim’s car in traffic and then opening fire. 


By disrupting normal activities to inflict damage, terrorists can 
spread fear in uniquely insidious and effective ways. Attacks on 
infrastructure such as power lines can foster widespread feelings of 
vulnerability. The terrorists may also see value in subverting their 
adversary’s technology. For example, monkeywrenching, a tactic 
used by environmental extremists, includes placing spikes in trees 
that saboteurs do not want cut down. Loggers who accidentally hit 
the hidden spikes with their chain saws can be badly injured. A far 
more destructive example is the derailment of trains, plotted by al- 
Qaida after 9/11 and employed by other groups in years past. In 
October 1995, one person died and dozens more sustained injuries 
after a group calling itself the Sons of the Gestapo used sophisticated 
techniques to derail a 12-car Amtrak passenger train in Arizona. In 
1986, someone removed a 39-foot-long section of rail along tracks 
used to transport spent nuclear fuel through Minnesota. A train car- 
rying lumber hit the sabotaged section and derailed before the train 
with the nuclear waste arrived. Near the site, authorities found a sign 
reading, “Stop Rad-Waste Shipments.” 

A related type of attack seeks to create environmental damage. For 
example, an al-Qaida prisoner claimed the group had planned to use 
timed devices to ignite wildfires across western American.” 


Kidnappings require extensive planning and logistical capabilities, 
but they have proven to be an effective fundraising and propaganda 
tactic for terrorists across the globe. The Revolutionary Armed Forces 
of Colombia (FARC) and the Colombian National Liberation Army 
(ELN) have abducted numerous Americans for money. The Abu 
Sayyaf group in the Philippines, an al-Qaida ally, has also specialized in 
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this technique, in one case demanding $10 million and the release of 
prisoners in exchange for a kidnapped American. The captive man- 
aged to escape. Another of their American victims, Guellermo Sobero, 
was beheaded that year. In some cases, the planned profits of a kid- 
napping may be counted purely in propaganda. In 2002, terrorists 
abducted Wall Street Journal reporter Daniel Pearl in Pakistan and then 
beheaded him and released a video of the crime. A similar fate befell 
Americans Nicholas Berg and Paul Johnson during 2004. Other spec- 
tacular kidnappings have included those of Italian Premier Aldo 
Moro, captured by the communist Red Brigade and murdered in 1978, 
and U.S. Marine Corps Lieutenant Colonel William “Rich” Higgins 
and CIA Officer William Buckley, kidnapped and killed in separate 
incidents during the 1980s, allegedly by Hizballah, the Iranian-backed 
group that abducted numerous Americans and other Westerners in 
Lebanon. 


A term sometimes used synonymously with kidnapping, hostage taking 
more commonly refers to the seizure of a group of victims in order to 
gain publicity or concessions. Often conducted as part of a siege or 
hijacking, hostage taking is highly risky for the terrorist, whose chances 
of escape are limited. Perhaps the most widely known hostage incident 
occurred during the Munich Olympics in 1972, when Palestinian ter- 
rorists captured Israeli athletes at the games, creating a running stand- 
off that ended in the deaths of the hostages. Another spectacular 
hostage incident occurred in 2002, when Chechen terrorists occupied a 
Moscow theater, seizing more than 800 hostages from numerous coun- 
tries. Russian security forces ended the episode by pumping anesthetic 
gas through the facility’s ventilation system, allowing them to kill the 
terrorists, but also poisoning many of the hostages. 


Weighing just 40 pounds, these missiles—also known as MANPADS 
or SAMs (surface-to-air missiles)—can bring down a 100-ton passen- 
ger jet from a mile away. While U.S. forces seized large numbers of 
these systems from al-Qaida and Taliban fighters in Afghanistan, 
thousands more are in circulation around the world. In recent 
decades, MANPADS are estimated to have downed around two 
dozen large and small civilian aircraft, killing hundreds of people. As 
of 2004, at least five large jet airliners had been attacked. Two attacks 
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killed all on board; two caused significant damage but no deaths. In 
the third incident, two missiles believed fired by al-Qaida followers 
missed an Israeli Boeing 757 leaving Kenya. This attack reinvigorated 
efforts to find ways to protect U.S. jetliners from attack.8 


ISSUE: 


PROTECTING COMMERCIAL JETS FROM MISSILES: 
COSTS AND BENEFITS 


Everyone agrees it’s possible for a terrorist hiding outside a 
major U.S. airport to fire a missile or MANPADS at a commercial 
passenger jet, downing the aircraft, potentially killing hundreds 
of people in the air and on the ground, and causing a huge psy- 
chological and financial blow to the aviation industry. 

The challenge is what to do about it. Following the attempted 
shoot-down of the Israeli 757 in 2002, Department of Homeland 
Security (DHS) stepped up its research efforts, allocating $100 
million to study possible solutions. But critics have attacked the 
program, saying it moved far too slowly. 

There are a number of ways to reduce the risk of a MANPADS 
attack. One is proliferation control, or reducing the number of 
weapons that could fall into terrorist hands. There are a number 
of such programs, including bounties for missiles turned in by 
citizens in Iraq and Afghanistan. But many terrorist groups 
already have missiles, and there are far too many more for any 
program to eliminate entirely. Securing the areas around airports 
is another tactic; but the flight paths of commercial aircraft make 
them vulnerable to attackers far outside airport perimeters. 
Takeoff and landing patterns could be changed, encouraging 
pilots to make extremely steep takeoffs and spiraling descents. 
But these techniques pose safety risks of their own and are of 
limited utility, as are reactive maneuvers by large commercial 
aircraft. There are even suggestions that airplanes could be hard- 
ened to withstand missile strikes more effectively. Even if possi- 
ble, such engineering solutions would require years of design 
and production, plus great expense. 
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Advocates of more aggressive MANPADS defenses urge the 
implementation of some of those systems plus “technical counter- 
measures,” or technological defense systems. One form of coun- 
termeasure is called expendables, objects such as flares and 
heat-emitting disks that are expelled from the aircraft to confuse a 
missile’s heat-seeking devices. However, they do not work well 
against more advanced MANPAD systems. Detractors also say 
the American public might be unwilling to put up with flares 
dropping from the skies around crowded airports. Laser-based 
systems, known as infrared countermeasures (IRCM), are more 
effective; they use energy to jam the missile’s homing system. 
Their downside is cost, which can run more than $1 million per 
unit, plus operational, maintenance, training, and support costs. It 
has been suggested they could be mounted on towers to protect 
airports, but a more common strategy is to place them on the air- 
crafts themselves, as the military does. Even outfitting half the 
nation’s passengers jets with such sophisticated infrared counter- 
measures could take several billion dollars and six years to com- 
plete. By some estimates, protecting the entire fleet could run $5 
billion to $10 billion per year. Even if the cost can be brought 
down significantly, an aggressive MANPADS defense will almost 
certainly cost many billions of dollars.’ 


1. How serious of a threat do MANPADS pose to the 
American flying public? 

2. How much emphasis should the U.S. government place on 
proliferation control? 


3. Should airports and the jurisdictions around them be 
required to increase security against missile attacks? Should 
the aviation system make changes in flight patterns to make 
attack more difficult, even if it adds risk in other ways and 
inconveniences passengers? 


4. Given the many other competing homeland security priori- 
ties, should the U.S. government push for technical coun- 
termeasures on passenger jets? How much should be spent 
on defending against this threat, considering other terrorist 
threats that also need to be countered? 
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Hijackings 


Bombings 


In the 1970s, hijacking became a staple of terrorist activity. Some sig- 
nificant hijackings include the Entebbe (airport) Incident, the 1976 
diversion of a passenger plane to Uganda, where the passengers were 
later rescued by Israeli commandos; and the 1985 hijacking of a TWA 
Boeing 727 headed from Athens to Rome, during which U.S. sailor 
Robert Stethem was tortured, killed, and tossed from the plane. U.S. 
authorities indicted Hizballah leader Imad Mughniyah in connection 
with the crime and offered a $5 million reward for his capture. 


Over the ages, many terrorists have agreed with a philosophy expressed 
in the al-Qaida’s manual: “Explosives are believed to be the safest 
weapon . . . Using explosives allows them to get away from enemy per- 
sonnel and to avoid being arrested . . . In addition, explosives strike the 
enemy with sheer terror and fright.” Bombings may involve elaborate 
weapons from the crude to the sophisticated and strategies of varying 
complexity. For example, an attack may involve two bombs, one to 
breach outer defenses and the other to attack the location within. An ini- 
tial bombing may be followed by a second, or “secondary device,” 
timed to hit rescue workers. In recent decades, the development of sui- 
cide bombing has added a grim new dimension to this terrorist tactic. 


Leave-Behind Bombs 


One of the simplest and most effective terrorist tactics is the time bomb. 
Left behind by an operative, the hidden bomb escapes detection until 
it explodes. In early 1975, Puerto Rican nationalists killed four people 
with a bomb left outside a Wall Street bar. Less than a year later, a time 
bomb in a locker blasted holiday travelers at New York’s LaGuardia 
Airport, killing 11 people. Despite a massive investigation of numerous 
terrorist groups, the case was never solved. 

In more recent years, cell phone technology has provided an effective 
way to detonate bombs remotely, such as the device that killed five U.S. 
citizens at Jerusalem’s Hebrew University in 2002. In 2002, a terrorist 
bombing at a Bali nightclub claimed 202 lives. In 2004, terrorists killed 
almost 200 people during a coordinated set of bombings aboard Spanish 
commuter trains. 


Letter Bombs 


From the American Unabomber to suspected Islamic extremists, ter- 
rorists have long used the mail system to deliver death to the 
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doorsteps of their enemies. The mail has also been used to deliver 
WMD and toxic elements such as anthrax mailed to U.S. targets in 
2001 and the toxic agent adamsite sent to U.S. and foreign embassies 
in Europe during 2003. 


Booby Traps and Improvised Explosives 


Booby traps may serve as the primary tool of operations, such as in 
assassinations, or to support other objectives. For example, they may 
protect weapons caches or be left behind at the scenes of kidnappings 
or other operations to impede investigators. The al-Qaida manual 
includes detailed instructions on creating booby traps, including one 
devised to blow up a victim’s television set. “However,” the manual 
cautions, “a brother [terrorist] should not be allowed the opportunity 
to work with setting booby traps until after he has mastered the use of 
explosives . . . because the first mistake a brother makes could be his 
last mistake.” 

Terrorists may also create improvised explosive devices. According 
to U.S. authorities, al-Qaida planned to blow up U.S. high-rise com- 
plexes by sealing apartments located in them, filling the apartments 
with natural gas, and detonating them with timers. 


Grenade Attacks 


Deadly, preassembled, and requiring little skill to use, grenades are an 
effective weapon, especially for poorly skilled or supported opera- 
tives. A 2002 grenade attack by suspected Islamic militants against a 
Protestant church in Pakistan killed two Americans and wounded 
many more. 


Aircraft Bombings 

Midair bombings have killed hundreds of passengers in recent years. 
Major attacks include an Air India Boeing 747 downed in 1985 with 
more than 300 people aboard; a TWA plane ripped open by a 1986 
bomb that sucked four victims, including an eight-month-old baby, to 
their deaths thousands of feet below; a (South) Korean Airlines plane 
bombed by North Korean agents in 1987; and a French UTA flight 
destroyed in 1989. The 1988 destruction of Pan Am Flight 103 with a 
bomb planted by Libyan agents remains one of the most deadly ter- 
rorist attacks against American interests, claiming 270 passengers and 
victims on the ground. 
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Suicide Attacks 


The terrorists keep developing technology in the hopes of evading 
bomb detection procedures and equipment. A terrorist with a bomb 
in his shoe failed to destroy a 2001 flight when his fellow passengers 
subdued him. The U.S. government warned of far more advanced 
“teddy bear bombs,” or explosive-impregnated fabrics such as coats 
or pillows that could be smuggled aboard aircraft without being 
detected by X-ray machines.” 


Car Bombs 


The lethality of a conventional bomb is linked to its size. The use of 
cars or trucks allows terrorists to deliver larger payloads to their tar- 
gets. Islamic terrorists linked to al-Qaida killed 6 and injured more 
than 1,000 with a bomb left in the World Trade Center parking garage 
in 1993. A huge truck bomb destroyed the Oklahoma City federal 
building in 1995. The next year, an explosives-laden fuel truck deto- 
nated outside a U.S. military facility in Saudi Arabia; the attack—sup- 
ported by Iran according to U.S. officials—killed 19 Americans. 


Starting in the 1980s, car bombers increasingly added a new compo- 
nent to their attacks—suicide. With no need for escape, the bombers 
could deliver their explosives directly into the heart of the target. 
Eventually suicide attacks grew to include strikes by individuals and 
even boats loaded with bombs. Finally, the terrorists mastered the use 
of airplanes as suicide weapons. 


Suicide Bombing by Car and Truck 


The United States was introduced to suicide bombings on April 18, 
1983, when a blast tore through the U.S. Embassy in Beirut, killing 63 
people. Al-Qaida and its sympathizers have been linked to numerous 
suicide car and truck attacks, including the deadly bombings of two 
U.S. embassies in Africa in August 1998; the detonation of a truck 
loaded with propane gas outside a Tunisian synagogue in 2002; and 
explosions at a residence for Americans and other foreigners in Saudi 
Arabia in 2003. 


Suicide Bombing by Boat 


Al-Qaida members piloting a small boat crammed with explosives 
blew up the USS Cole in 2000, killing 17 sailors berthed with the ship 
in Yemen (the group had failed in an earlier attempt against a U.S. 
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Navy ship when the suicide boat sank under the weight of the explo- 
sives). Two years later, an explosive-filled boat rammed a French oil 
tanker off the coast of the same country. 


Suicide Bombing by Individual 


While individual terrorists have undertaken suicide bombing mis- 
sions in several areas of the world, Israel has become identified as the 
chief target of such attacks. Numerous U.S. citizens have died in sui- 
cide attacks by Palestinian terrorists, including during major attacks 
in 2003, 2002, and 1995. Palestinian extremists have pioneered suicide 
bombing techniques, including the indoctrination of bombers and the 
production of suicide belts filled with explosives and engineered to 
allow easy detonation by the bomber. Other groups have also focused 
on suicide attacks, most notably the Liberation Tigers of Tamil Eelam 
(LTTE), or Tamil Tigers. 


Suicide Bombing by Aircraft 

A natural evolution in the progression of suicide terrorist techniques, 
the use of airplanes for suicide bombings had already been developed 
by Japan’s kamikaze pilots, who rammed their explosives-packed air- 
craft (and suicide torpedoes and boats) into U.S. ships during the 
waning days of World War II. (The Turner Diaries, the novel that 
served to inspire a number of domestic terrorists, includes a suicide 
flight into the Pentagon by the protagonist.) 

In 1994, an emotionally disturbed American crashed a small plane 
onto the White House grounds. That same year, Algerian hijackers 
planned to ram a French airliner into the Eiffel Tower or explode it 
over Paris but were thwarted when commandos seized the aircraft on 
the ground. Intelligence reports indicated other terrorists had also 
considered this tactic before it was employed to such devastating 
effect on 9/11. 


Just the threat of attack can achieve terrorist goals, from creating fear 
to generating intelligence. Bomb threats can disrupt airline flights 
and, when repeated, engender complacency among security person- 
nel and the public. Terrorists may also stage hoaxes in order to study 
the response of authorities in order to plan more effective attacks. In 
some cases, such as the 2001 anthrax attacks, a terrorist tactic can 
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Other Common 
Tactics 


spawn hundreds or even thousands of imitation hoaxes. After the 
anthrax attacks, authorities wasted untold amounts of time and 
money responding to suspicious powders sent via the mail by a pro- 
life terrorist, other hoaxers, and even unthinking practical jokers. 


Among other terrorist actions are assassinations; sieges, which 
involve the seizure of a building or other location with symbolic 
value and/or occupants; raids, which may target specific individuals 
such as tourists or critical infrastructures; drive-by shootings, some- 
times conducted by motorcyclists; sniping; rocket or mortar attacks; 
robberies; and fire bombings. 


CHAPTER SUMMARY 


Terrorists have a huge number of potential targets and a range of 
capabilities with which to hit them. While those responsible for secur- 
ing the homeland must consider all possible terrorist attacks, certain 
tactics have proven especially common. More than a thousand years 
ago, knife attacks inspired fear; in the modern world, terrorists have 
used videotaped beheadings to achieve the same effect. 

When new types of attacks occur, they have often been foreshad- 
owed by earlier incidents. Yet even new tactics involve traditional 
operational phases, which offer opportunities to disrupt the terror- 
ists. Stopping terrorists before they strike again has gained a new 
urgency in the modern era, where the next major component of the 
terrorist arsenal is WMD. 


CHAPTER QUIZ 


1. What organizational features do terrorist groups use to maintain 
their security? 


2. What makes an attractive target for a terrorist? 
3. Name two major tactical phases of a terrorist operation. 


4. Identify three terrorist tactics that have claimed large numbers of 
victims. 
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CHAPTER 


WEAPONS OF MASS DESTRUCTION 


Understanding the Great Terrorist Threats 
and Getting beyond the Hype 


A direct attack against American citizens on American soil is 
likely over the next quarter century. The risk is not only death 
and destruction but also a demoralization that could undermine 
US global leadership. 


The Hart-Rudman Commission Report, April 2001 


CHAPTER OVERVIEW 


It would be a dangerous folly to confuse the unfamiliar with the 
improbable. There are terrorist weapons that can inflict cata- 
strophic destruction, inflicting tens of thousands of casualties and 
hundreds of billions of dollars in physical destruction. There are 
terrorist groups that want these weapons, and there are ways for 
them to get them. On the other hand, Americans are not powerless 
in the face of these dangers. Understanding them and separating 
hype from reality is the first step to effectively responding to the 
threat of weapons of mass destruction, often referred to as chemi- 
cal, biological, radiological, nuclear, and high-yield explosives 
(CBRNE). This chapter reviews how each of the CBRNE threats 
might be obtained and employed, as well as how effective they 
might be. 
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CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Understand how CBRNE weapons can be manufactured, 
obtained, and employed by terrorists. 


2. Describe the difficulties of employing chemical weapons 
in a terrorist attack. 


3. Describe the steps required to manufacture biological 
weapons and the challenges a terrorist might face in 
each step. 


4. Understand the nature of casualties and damages that might 
be produced by a radiological dispersal device and how the 
effects of a “dirty bomb” might be mitigated. 


5. Discuss the difficulties terrorists face in obtaining nuclear 
weapons and material. 


6. Discuss why the use of improvised high-explosive devices 
are among the most likely to be used in a terrorist attack. 


WEAPONS TO WORRY ABOUT 


It was something no one expected. In 1974, an extortionist threatened 
to explode a nuclear weapon in the center of Boston. He wanted 
$200,000. Federal agents and scientists from the Atomic Energy 
Commission scrambled to the scene. No one was really sure what to 
do. The money was delivered to a prearranged spot, but never picked 
up. It was a hoax. The next year, a blackmailer threatened to blow up 
New York’s water supply with a nuclear weapon unless he received 
$30 million. It was another fraud. In 1984, authorities worried that 
small nuclear devices would be smuggled into the Olympiad in Los 
Angeles. This fear also proved unfounded. A month after the 9/11 
attacks, intelligence reports warned of the possibility that a stolen 
Russian nuclear weapon might be bound for New York City. Nothing 
occurred. Because these threats did not happen, it does not mean that 
they could not happen. 
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Scope of the 
Chemical Threat 


CHEMICAL 


Before the Aum Shinrikyo sarin nerve gas attack on a Tokyo subway 
station in 1995, chemical munitions were thought of primarily as bat- 
tlefield weapons. On March 20, 1995, members of the cult released 
enough gas into the subway system to kill 12 commuters and sicken 
5,000. The cult failed to murder large numbers because of the poor 
quality of the chemical agent employed in the attack. But, Aum 
Shinrikyo did demonstrate to the world that modest chemical strikes 
might be an effective terrorist weapon, with the potential to cause 
mass casualties.! Equally troubling, the strike illustrated how even 
unsuccessful attacks can cause extensive disruption and fear. 


Depending on the type of agent, concentration, and dose received, 
chemical weapons can inflict a variety of casualties from discomfort 
to permanent injuries or death. A light dose of sulfur mustard gas, for 
example, will result in an individual developing painful skin blister- 
ing and eye and lung irritation over a period of a few hours. On the 
other hand, a person who inhaled 100 milligrams of sarin, a deadly 
nerve gas, for one minute would have a 50 percent chance of dying 
within 15 minutes. Chemical weapons are usually employed in 
aerosol form to be either inhaled through the lungs (particles in the 1 
to 7 micron range) or absorbed through the skin (70 microns or less), 
sizes that are a fraction of the size of a human hair. 

The Chemical Weapons Convention prohibits signatories from 
manufacturing, stockpiling, or using chemical weapons.? The con- 
vention, however, has not prevented states from developing and even 
employing chemical arms. The technology and expertise required to 
produce viable chemical weapons is within reach of many potential 
enemies. Also of concern are leftover stocks from Cold War chemical 
arsenals that are still awaiting destruction. They could be sold, stolen, 
or sabotaged. The safety and security of the vast Russian stockpiles 
might be considered the most serious, present problem.’ 

States are not the only threat. Even terrorist groups with modest 
means could produce small amounts of an effective chemical weapon. 
Compromising on purity, shelf-life, and safety could make agents 
even easier to manufacture. Two obstacles have to be overcome. First, 
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an enemy must obtain precursors, the component chemicals required 
to produce a lethal chemical compound. These can be stolen, pur- 
chased, or manufactured. Most precursors are commercially available 
since they also have industrial uses. The major obstacles to obtaining 
these materials is the Australia Group, a cooperative of countries 
working to manage the export of precursor chemicals, and the associ- 
ated national export controls that track the production and use of pre- 
cursor chemicals. These controls provide some security, but 
determined terrorists might overcome these impediments by buying 
precursors in small amounts, employing substitute chemicals, manu- 
facturing precursors from simpler compounds, or obtaining chemicals 
from suppliers not covered by the nonproliferation regime. 


Making Chemical Weapons 


Production of large quantities of chemical weapons requires indus- 
trial facilities. A manufacturing capability sufficient to produce thou- 
sands of kilograms of sarin gas would cost approximately $30 
million. Special facilities can be constructed or commercial plants 
could be converted to the manufacture of chemical agents. Some 100 
countries already have the capacity for large-scale production. 

The ability to produce chemical weapons, however, is not beyond 
the means of any determined terrorist. An adequately financed 
organization could field a fairly significant threat. The Aum 
Shinrikyo group, for example, had a substantial manufacturing 
capacity. A reasonable expectation is that 20 to 30 kilograms of sarin 
gas could be manufactured at the cost of several million dollars. An 
even more modest capability, sufficient to manufacture a few kilo- 
grams of low-quality chemical weapons might be assembled for tens 
of thousands of dollars using readily available commercial laboratory 
equipment in a facility under 1,000 square feet. 

Clandestine labs can be hidden anywhere. The illegal metham- 
phetamine production in the United States offers an illustration of the 
problem. Meth labs use highly toxic and explosive chemicals. Labs 
have been found in farms, garages, apartments, and basements. Los 
Angeles law enforcement estimated that in 2000, labs dispersed 
throughout two counties in California had the capacity to manufac- 
ture 44.6 metric tons of methamphetamine a year. Federal authorities 
during that period seized only 3.87 tons. These figures suggest both 
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the potential scope of illegal, small-scale chemical production and the 
difficulty of finding clandestine facilities, even when they leave 
prominent signatures like noxious odors and large amounts of obvi- 
ously contaminated trash discolored by chemicals. 


Delivering Chemical Weapons 


Manufacturing deadly agents is only part of the process of fielding a 
credible threat. Effectively delivering chemical munitions is a signifi- 
cant obstacle. Large-scale chemical attacks require a significant vol- 
ume of material both to achieve coverage of the target area and to 
compensate for wind, temperature, and humidity, which can disperse 
or diminish an agent’s effectiveness. The population density of the 
target area for the attack is also an important factor. For example, 
under moderate weather conditions 300 kilograms of sarin gas dis- 
pensed by air would kill about 60 to 200 people in a .22 square kilo- 
meter area (based on a population density of 3,000 to 10,000 people 
per square kilometer).° 

Dispensing chemicals is also a challenge. The best method for mass 
dispersal is employing sprayers such as crop dusters. Sprayers force 
liquids through a specially designed nozzle to create a suspension of 
fine particles that can drift over a large area. Even with a reliable dis- 
penser, however, the challenge of transporting and delivering high 
volumes of chemical weapons under the right environmental condi- 
tions for a lethal attack against a large open-area target are difficult. 
In high temperatures the chemicals will evaporate. In the cold, they 
will condense and fall to the ground. High winds will disperse chem- 
icals rapidly. The best conditions for a chemical attack may be a tem- 
perature inversion where air is trapped over a target area. Complex 
urban terrain can also significantly alter the dispersal pattern of 
chemical agents. Some experimentation suggests that the shape and 
array of buildings in a cityscape will prevent the uniform distribution 
of the agent over a target area. 

On the other hand, smuggling into or manufacturing small quanti- 
ties of chemical agents within the United States and employing them 
in confined spaces such as buildings or subways using some kind of 
simple release mechanism or a ventilation system would be relatively 
easy and, depending upon the type of agent, the number of people 
exposed could be in the thousands. Buildings with mechanical 
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ventilation, for example, introduce outdoor air at the rate of about 15 
to 20 cubic feet per minute. As a result, there is a constant potential 
for contaminants to be quickly funneled throughout the building. The 
chimney effect of air rising through stairwells and elevator shafts can 
also disperse air and chemical agents rapidly. 


Industrial Chemical Threat 


Perhaps of greater concern, however, should be the many toxic chem- 
icals used for industrial and commercial purposes that might be 
exploited by terrorists. Tanker trucks, railcars, ships, pipelines, and 
trucks carrying barrels of poisons or other hazardous materials, and 
chemical manufacturing and storage facilities are all prospective 
weapons. In 2001, the Environmental Protection Agency reported that 
at least 123 U.S. chemical plants contain enough chemicals that, if a 
major release occurred, each could result in a million or more casual- 
ties. In one agency survey of 15,000 chemical facilities, the mean pop- 
ulation that might be potentially affected by a toxic chemical release 
in a worst-case scenario was 40,247.° 

Indeed, chemical accidents, fires, and spills, many causing death 
and significant property damage, are not an unknown occurrence. 
Many of these incidents occurred near densely populated areas. For 
instance, a study of chemical releases in New York over a five-year 
period found that more than half the releases were near residences. 
Seventy-five percent of the events occurred within one-quarter mile 
of a household.” Chemical accidents throughout the United States 
have resulted in significant damage. For example, from 1986 to 1999 
releases from pipelines caused, on average, 23 fatalities, 113 injuries, 
and $68 million in damage per year. 

The most likely dangerous agents that could be released by a delib- 
erate terrorist attack would be either toxic chemicals or flammable 
substances. Of the two, toxic chemicals could be potentially the more 
dangerous since they tend to represent a greater downwind hazard. 
Anhydrous ammonia and chlorine are the mostly widely used indus- 
trial chemicals that might be the target of a sabotage effort. Both can 
represent substantial vapor hazards. For instance, most chlorine in 
the United States is transported in 90-ton railcars. The downwind 
hazard for a release from a railcar in an urban setting is 22.5 kilome- 
ters. The gas plume could kill outright any exposed individual up to 
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six kilometers away and inflict permanent lung damage on those far- 
ther downwind. 
On the other hand, while flammable substances present less of a 
vapor hazard, they can still represent a substantial danger. For exam- 
ple, in 1989, a massive release of isobutene, ethylene, hexane, and 
hydrogen from a Phillips 66 chemical plant in Houston ignited in a 
fireball that exploded with a force of 2.3 kilotons. The disaster killed 
23 and injured 130, leaving $750 million in damage at the plant and 
hurling debris 9.5 kilometers into neighboring communities. 


ISSUES: 
BHOPAL—REAL-LIFE CHEMICAL DISASTER 


The 1984 release of methyl isocyanate from a Union Carbide 
pesticide factory in a suburb of Bhopal, India, sickened 200,000 
and killed 2,500. Although it was not known at the time, the gas 
was formed when a disgruntled plant employee, apparently 
bent on spoiling a batch of methyl isocyanate, added water to 
a storage tank. The water caused a reaction that built up heat 
and pressure in the tank, quickly transforming the chemical 
compound into a lethal gas that escaped into the cool night air. 
This industrial disaster illustrated the potential casualties that 
might result from a catastrophic release of deadly chemicals as 
a result of sabotage. 


Excerpt from the Union Carbide Lessons Learned Report 


Emergency Response. Union Carbide had a contingency plan 
for emergencies. This plan provided a basic framework and 
some guidelines. In Bhopal, however, the “unthinkable” 
had happened and the terrible facts of the tragedy were 
overwhelming. However, the versatility of our staff, their 
stamina in the face of long, grueling hours, and a systematic 
approach to communications that had been in place for 
some time were significant assets. 
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Press Coverage. In the first days, scheduled news conferences 
helped us deal with the hundreds of inquiries that poured 
in from around the world. There was no way we could 
respond to every individual call. But many of the fre- 
quently asked questions were considered when we pre- 
pared for daily briefings. There was another benefit to the 
news conferences. They were public forums on which 
many key constituents, such as employees, shareholders, 
and customers, relied for information. They also demon- 
strated how the company would deal with the crisis as 
well as the demands of its ongoing businesses. We under- 
stood that above all we would have to demonstrate, as 
best we could, our integrity and competence. Addition- 
ally, I’m persuaded that the exceptional performance of 
Union Carbide employees throughout the world con- 
firmed what we said. It also reassured all of us and our 
constituents that we would not hide or crumble in the face 
of adversity. 


New Safety Procedures. The impact of Bhopal went well beyond 
Union Carbide. It changed views and practices among the 
entire U.S. chemical industry. It provided impetus to the 
development and enactment of federal laws requiring 
companies to notify government and the public about toxic 
substances they make or use. The EPA’s Federal Superfund 
Reauthorization, spurred by the Bhopal tragedy, helped 
bring about a network of local emergency planning coun- 
cils, in which corporate specialists work with their neigh- 
boring communities to safely deal with unthinkable 
environmental disasters. 


1. What caused the Bhopal disaster? Could similar tragedies 
happen in the United States? 


2. How could terrorists exploit such events? 
3. What should be done to limit such terrorist threats? 
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In addition to striking industrial facilities, small-scale attacks 
could also be made with an arsenal of contaminants and toxins that 
are available to virtually anyone or are stored in areas that have lit- 
tle or no security to prevent tampering or sabotage. Fuels, pesticides, 
and solvents, for example, can all be used as poisons and contami- 
nants that might cause some casualties and inflict psychological 
harm and economic disruption. One analyst calls these attacks “toxic 
warfare” and notes a growing tendency of terrorist groups overseas 
to conduct strikes using readily available materials.’ These practices 
could be adopted for attacks in the United States. 


Product or Commodity Tampering 


Chemical attacks could also be made through product tampering or 
poisoning of food and water supplies or disrupting agricultural pro- 
duction. Because of the volume of material required for widespread 
contamination, large-scale attacks that might inflict catastrophic 
damage would be extremely difficult. For example, a water source 
would have to be contaminated with significant amounts of cyanide 
to produce a lethal drink of water.'° 

By comparison, product tampering and small-scale, and poten- 
tially very deadly, attacks are eminently achievable. In 1982, for 
example, seven people in the Chicago area died as a result of ingest- 
ing Tylenol laced with cyanide. In addition to the actual attack, the 
public was bewildered by a wave of 270 incidents of suspected 
product tampering reported to the Food and Drug Administration 
in the wake of the incident. Many of these were outright hoaxes. 
Still, the affair demonstrated the widespread concern and confusion 
that could be generated by a product-tampering campaign. 


BIOLOGICAL 


Biological weapons use living microorganisms including bacteria, 
rickettsias, fungi, or viruses to cause infections that incapacitate or 
kill. A gram or less of many biological weapons can inflict high lethal- 
ity. Weight for weight, they can be hundreds to thousands of times 
more lethal than the most deadly chemical agents and can, in some 
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cases, be produced at much less cost. Some weapons are communica- 
ble and can be spread easily beyond the initial target. 

Toxins are chemicals produced by bacteria, fungi, plants, or ani- 
mals that act as poisons. Usually they are classified as either chemi- 
cal or biological weapons, though in fact they have some 
characteristics of both. While they are derived from organic sources, 
unlike biological weapons they are not living organisms, do not 
reproduce, and are not communicable. As with with biological 
weapons pound for pound they can be hundreds to thousands of 
times more lethal than an equivalent amount of chemical nerve 
agent. However, like chemical weapons the effects of some toxins 
can appear in seconds to minutes rather than requiring hours or 
weeks for symptoms to appear, as is often true in the case of biolog- 
ical infections. Unlike chemical weapons, toxins can often be difficult 
to detect and diagnose. For scientific research and development or 
nonproliferation issues it may be useful to group toxins with biolog- 
ical weapons, but medical considerations and casualty response, 
assessment, and treatment emergency personnel should distinguish 
toxin weapons as a separate category." 


Terrorist groups are capable of performing some form of biological or 
toxin warfare. Individuals with some graduate-level science educa- 
tion or medical training could produce bioweapons, though the skills 
required for creating very small and stable agents does require some 
sophistication. In some cases, biological attacks can be mounted with- 
out any scientific skills or medical knowledge. (See Figure 9.1.) 


Developing Biological Weapons 


There are four essential tasks involved in producing a biological 
agent: obtaining seed stocks, production, stabilization, and prepara- 
tion for distribution. First, a seed stock of the pathogen or toxin-pro- 
ducing organism must be obtained. Not all biological agents and 
toxins are sufficiently lethal or stable to be used as weapons. To pre- 
clude biological materials that can be readily weaponized from being 
readily available, there are restrictions on the most dangerous 
pathogens, based on the Biological and Toxin Weapons Convention.” 
Even without an implementing protocol for the convention many 
countries, principally operating under the cooperation of the 
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Australia Group, have worked to prevent the acquisition of seed 
stocks by terrorist groups or states attempting to mount weapons pro- 
grams. Each state is responsible for implementing its own measures. 
Enforcement, however, is inconsistent. 

In addition, there are means to overcome the restrictions imposed 
by the Australia Group. Stocks can be purchased under the guise of 
conducting legitimate scientific research. In 1984 and 1985, for exam- 
ple, the Rajneeshee cult in Oregon set up its own medical corporation 
and obtained pathogens from the American Type Culture Collection, 
a nonprofit organization that serves as a repository of biological 
materials for scientific and medical research. The cult later used some 
of these materials to conduct terrorist attacks.’ In 1996, and again in 
2002, the U.S. government moved to tighten restrictions on pathogen 
transfers, but the possibility that an enemy could obtain seed materi- 
als from a source in the United States or other countries remains a 
concern.!4 

Seed stocks can also be stolen or extracted from a natural source. In 
some instances, as in the case of smallpox, this could be very difficult.!° 
In other cases, sources are more readily available. Some toxins, for 
example, can be extracted from plants or animals, though they are dif- 
ficult to produce in large quantities. Thus, the second task in fielding a 
bioweapon is to produce the biological or toxin agent in bulk. Protein 
toxins, for example, are produced from bacteria by batch fermentation. 
Much of the technology required for this task can be employed in both 
industrial biotechnology and commercial fermentation. 

The technical procedures for weapons production are available in 
open-source, scientific literature. Over 100 states have the capacity to 
manufacture biological weapons on a large scale. A basic facility can be 
constructed and operated for less than $10 million. However, any ter- 
rorist group, given a competent team of graduate students and a facil- 
ity no larger than a few hundred square feet, could field a small-scale 
program for a few hundred thousand dollars or less. The Biological and 
Toxin Weapons Convention limits the proliferation of some technolo- 
gies. The challenge of implementing controls for dual-use science and 
technology is one major obstacle to enforcing the convention. 

The third task is stabilizing the biological or toxin agents for stor- 
age and dissemination. Freeze-drying, introducing chemical addi- 
tives, or microencapsulation (coating droplets of pathogens with a 
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Delivering 
Biological 
Attacks 


protective material) are all proven methods, and the equipment 
needed to perform them is not difficult to obtain. Commercial freeze 
dryers, for example, are widely used in the food and beverage indus- 
try. Small-scale dryers, used to produce market samples, can also be 
used in biotechnology applications. 

The fourth task is preparing agents for dispersal. Biological and 
toxin weapons usually take the form of liquid slurries (a mixture of 
water and fine particles) or a powder. Liquid slurries are easiest to 
prepare, but less effective and heavier. Powders are created through a 
milling process, a technically challenging component of weapons 
production, but again one that mirrors commercial processes. 

Obtaining the means to manufacture ultrafine particles is central 
to producing potentially highly lethal agents. The lethality of many 
pathogens rises considerably when they are inhaled. Particles 
between one to five microns in diameter are ideal. They remain in 
the air longer and can be inhaled deep into the lungs where the 
membranes are thinner and small particles can pass more easily into 
the body and initiate respiratory infections. In addition, coatings 
can also be used to prevent clumping and ensure particles remain 
small. 

Producing ultrasmall particles that are both clump-free and highly 
stable is a trademark of programs that reflect a greater degree of tech- 
nical skill and higher costs, requiring tools such as sophisticated 
spray dryers,!® electron microscopes (which alone cost $50,000 to 
$250,000 or more), and hazard containment facilities. 


The means available to deliver biological and toxin weapons range 
from very difficult to easy. The most lethal means for delivering bio- 
logical agents is in an aerosol form. This can be done effectively by 
sprayers and, far less efficiently, by explosive devices such as self- 
dispensing cluster bombs, which destroy part of the agent when they 
detonate. Cruise missiles, unmanned aerial vehicles (UAVs), or air- 
craft could perform sprayer attacks, but only effectively if specialized 
spraying equipment was employed that ensured proper dispersal 
and prevented particle clumping. Clumping of agents can degrade 
the effectiveness of an attack. Large particles quickly drop to the 
ground or, if inhaled, do not easily pass into lung tissue, significantly 
lessening the potential for infection. Conventional sprayers on crop 
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dusters or air tankers that are used to fight forest fires, for example, 
would probably not be very effective at dispensing agents in the one- 
to five-micron range. Mechanical stresses in the spraying system 
might also kill or inactivate a large percentage of particles, by some 
estimates up to 99 percent. However, if a terrorist had a large supply, 
say 50 kilograms of a virulent bioweapon, or was not terribly con- 
cerned about achieving maximum effects, crude dispensers might be 
adequate. 

Any method of delivering biological agents, from dropping a liq- 
uid slurry out of helicopters to sprinkling agents on the sidewalk, 
might achieve some success, but weather conditions and complex 
urban terrain will affect dispersal and the life span of the microbes 
(many are sensitive to ultraviolet light and temperature extremes), 
and thus high casualties and even widespread contamination are not 
assured. When Aum Shinrikyo flung anthrax off a tall building; the 
agent was so dispersed or of such poor quality that there were no 
casualties.'” 


Environmental Considerations 


Attackers wanting to ensure high lethality or widespread contami- 
nation would probably seek means that would limit the environ- 
mental stresses on the agent and vector it directly onto the intended 
target. Ventilation systems and air conditioners might prove useful 
means for injecting agents into confined spaces. For example, the 
1976 outbreak of pneumonia that sickened and killed American 
Legionnaires attending a convention in Philadelphia was caused by 
the bacterium Legionella, which spread through the hotel by the air- 
conditioning system.'® An inventive enemy might be able to adapt 
such a method for a deliberate attack. Alternatively, agents released 
in a subway system would be widely dispersed by the movement of 
trains, which act like huge pistons forcing air to move rapidly 
through subway tunnels. Portable atomizers might be employed to 
contaminate subway cars, airport terminals, or campus recreation 
rooms. 

Intentional contamination of food and water is another possible 
form of biological attack. Natural outbreaks of waterborne contam- 
ination are already an enduring concern. A protozoan infestation in 
the Milwaukee water supply in 1993 killed 50 and sickened 400,000. 
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Intentionally fouling water supplies, however, is difficult. Though 
there are over 55,000 community water systems, the opportunities 
for an effective attack are less of a risk than generally assumed. 
Municipal waterworks are already designed to filter out or kill 
impurities and pathogens. A combination of filtration and disinfec- 
tion technologies can address most risks, if properly applied. 
Contaminants, for example, can be removed by inexpensive and 
widely available carbon filters. Additionally, agents would be dis- 
bursed and diluted requiring huge volumes of contaminant to have 
any effect. In short, waterborne attacks are feasible, but difficult.!” 


Product Tampering 


On the other hand, product tampering or contamination of food sup- 
plies is an ever-present danger. Contaminated food is already a seri- 
ous problem. Food-borne disease causes an average of 76 million 
illnesses each year, 325,000 hospitalizations, and 5,000 deaths, creat- 
ing an economic cost that by some estimates ranges up to $32 bil- 
lion. Humans can also be exposed to a range of deadly or 
debilitating toxins by ingesting contaminated plant and animal prod- 
ucts, or less frequently by contact or inhalation. Beans, peppers, car- 
rots, and corn, for example, are ideal vehicles for carrying botulinum. 
Biological or toxin agents could be introduced effectively through a 
wide variety of commodities from cookies to cosmetics. Improper 
storage, poor sanitation, and cross-contamination during the produc- 
tion, transportation, processing, or storage of medicine, food sup- 
plies, or other consumables can further spread toxins or biological 
agents. 


Infectious Disease 


Finally, another means of bioattack is to spread infectious diseases 
through humans, animals, or insects. Infectious diseases are already 
the third leading cause of death in the United States and battling 
them is an ongoing health issue. For example, a recent outbreak of 
mosquito-borne dengue fever in Hawaii, a disease not endemic to 
the United States, sickened 119 people. Responding to the outbreak 
cost over $1.5 million. An enemy might attempt to introduce diseases 
not common in the United States such as cholera, dengue, dengue 
hemorrhagic fever, and dengue shock syndrome. The threat of an 


—P— 


Sauter ch09-10 


168 


3/21/05 2:50 PM Page 168 5 


Scope of the 
Radiological 
Threat 


PART 2 • UNDERSTANDING TERRORISM 


epidemic varies with the type of agent employed; the nature of the 
attack; the method of transmission; the medical countermeasures 
required and available to prevent or treat the disease; and the size of 
the target population. 


RADIOLOGICAL 


Radiological weapons rely on radiation, rather than blast, to cause 
death and casualties. They can also disrupt, damage, and deny 
access to areas, systems, and facilities. Radiation inflicts casualties by 
destroying or damaging human cells. High-dose radiation can kill or 
incapacitate individuals. Lower doses can create both short-term 
(such as lowering the body’s immune response and making individ- 
uals more susceptible to illness and disease) and long-term (includ- 
ing causing various forms of cancer) health problems. In addition, 
some radioactive isotopes, such as cesium-137, bond easily with 
common materials like concrete and soil, and could represent long- 
term health and contamination risks in an affected area.”! 


The distance from the radioactive source, the manner of dispersal, 
weather conditions (which will affect how far contaminated particles 
mixed in a debris cloud or aerosol attack will disperse), the degree of 
protection (e.g., buildings, overhead cover), and the type of radiation 
will significantly affect the manner of the threat. Alpha particles, for 
example, travel a short distance and most will not penetrate beyond 
the dead layer of epidermal skin. They are harmful, however, if 
inhaled or swallowed. Beta particles can penetrate the skin and inflict 
cellular damage, but they can be blocked by common materials like 
plastic, concrete, and aluminum. In contrast, gamma rays and neu- 
trons are far more powerful and do not lose energy as quickly as 
alpha and beta particles when they pass through an absorber like 
clothing or walls. Heavy lead shielding, great amounts of other 
shielding with absorbent or scattering material (e.g., several feet of 
earth or concrete), or significant distance (perhaps in kilometers) may 
be required to avoid high-dose exposure.”” In an urban attack, build- 
ings might absorb or shield significant amounts of radiation, signifi- 
cantly reducing the initial prospects for casualties, though the 
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cleanup of contaminated buildings would have substantial economic 
consequences. 


Types of Threats 


Radiological weapons can take two forms: radiological dispersal 
devices, or spreading contamination through attacks on critical infra- 
structure including systems that supply food and other commodities, 
or by striking nuclear facilities. 

A dirty bomb attack could take many forms. Relatively large 
weapons with highly radioactive material would likely be required to 
kill or sicken great numbers of people. A truck bomb, for example, 
with 220 kilograms of explosive and 50 kilograms of one-year-old 
spent fuel rods would produce a lethal dosage zone with a radius of 
about one kilometer. The explosion of such a device employed in an 
urban area against a large, unsheltered population might contaminate 
thousands or more.” 

Although producing a radiological weapon is far easier than build- 
ing a nuclear bomb, a highly effective radiological dispersal device 
that can be easily transported to its target could be difficult to fabri- 
cate. Iraq, for example, attempted and failed to develop a practical 
weapon.” 

Among the problems in building a large device is that significant 
amounts of very highly radioactive material must be heavily 
shielded or the material will melt carrying containers and sicken or 
kill anyone attempting to assemble or transport the weapon. Because 
of shielding requirements and the heat generated by some highly 
radioactive nuclear material (such as fuel rods for nuclear reactors), 
weight can be a significant factor in determining the size and 
potency of a weapon. For example, one assessment concluded that 
sufficient radioactive material to contaminate 230 square kilometers 
would require about 140 kilograms of lead shielding. Other means of 
distribution can also face technical and material challenges. If an 
enemy wanted to distribute radiological material as a fine aerosol 
(with the ideal size being about one to five microns), it would require 
a degree of specialized knowledge, as well as specialized handling 
and processing equipment to mill the radioactive agent and blend it 
with some inert material to facilitate dispersion and increase the risk 
of inhalation. 
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Obtaining Radiological Material 


Unlike nuclear weapons, a radiological dispersal device does not 
require plutonium or enriched uranium. All that is needed is some 
form of radioactive material. Any nuclear reactor is capable of pro- 
ducing material for a radiological weapon. Worldwide, the 
International Atomic Energy Association (IAEA) lists 438 nuclear 
power reactors, 651 research reactors (284 in operation), and 250 fuel 
cycle plants. Highly radioactive material, such as spent fuel rods or 
other waste material is subject to export controls. It is, however, far 
more easily bought or stolen than weapons-grade material. Security 
worldwide is uneven, and trafficking in these materials is not 
unprecedented. Since 1993, the IAEA has recorded 531 cases of illegal 
transactions in radioactive material. 

Additionally, there are tens of thousands of radiation sources in 
medical, industrial, agricultural, and research facilities. Illicitly 
obtaining these materials is well within the realm of the possible. 
According to the IAEA over 100 countries have inadequate regulatory 
systems for controlling radioactive material. Even the United States 
has significant gaps in its export rules covering highly radioactive 
substances. Current regulations permit virtually unlimited export of 
high-risk materials.” 


Weapons Effects 


The impact of the weapon on those who did not receive an immedi- 
ately lethal, incapacitating dose of radiation is hard to predict. Even 
the largest radiological dispersal device is only likely to inflict cata- 
strophic casualties if long-term cancer risks are considered. But 
whether contamination on that scale can be achieved with a dirty 
bomb is debatable.” The effects of a radiological weapon would have 
a latency period between exposure and the onset of symptoms from 
hours to weeks, or even years in the case of some cancers. Thus, a 
weapon might have considerable psychological impact, though the 
immediate physical damage and disruption might not be great or, in 
some cases, even apparent. 

Prompt modern medical treatment can dramatically improve sur- 
vivability after radiation injury for individuals who do not receive an 
initial lethal high dose of radiation. In particular, dramatic medical 
advances have been made in caring for individuals with suppressed 
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Radiological 
Threats from 
Nuclear 
Infrastructure 


immune systems, a common by-product of radiation attack. In addi- 
tion, the danger of low-dose exposure from a radiological weapon 
may be far less than is commonly assumed. The long-term effect of 
low-dose radiation is determined by the capacity of irradiated tissue 
to repair DNA damage within individual cells. This is governed by a 
number of exposure, health, and genetic factors. There is some sci- 
entific evidence that current models may overestimate risks.” 

On the other hand, due to public fears of radiation, the psycholog- 
ical effects of an attack might be out of proportion to the physical 
threat. Posttraumatic stress and major depression disorders, for 
example, could be major problems.”® The economic impact of a radi- 
ological strike should also not be underestimated. If contamination is 
extensive, just removing irradiated material could have significant 
consequences. For comparison, eliminating low-level radioactive 
waste from biomedical research facilities represents substantial cost. 
Shipping these materials to an appropriate storage facility can cost up 
to $300 or more per cubic foot. The economic consequences of an 
attack would also have to include the cost of evacuating contami- 
nated areas and housing, feeding, and caring for displaced persons, 
as well as lost worker productivity. 


For achieving catastrophic damage through a radiological attack, 
strikes on nuclear power infrastructure or other nuclear facilities offer 
a far better option than exploding dirty bombs. At its worst, a major 
release of radiation from a reactor or spent fuel storage site caused by 
sabotage or a direct attack could kill tens of thousands. Many of the 
103 operational nuclear plants, 16 decommissioned plants that contain 
spent fuel, and 37 nonpower licensed reactors in the United States are 
sufficiently close to major population centers that an attack on one of 
these facilities would cause large numbers of people to evacuate and 
severe economic disruption in addition to threatening lives and prop- 
erty. The cleanup effort of a major radiological release from a nuclear 
facility would be substantial, well into the billions of dollars.” 

The vulnerability of nuclear facilities to ground, sea, and air attack 
is a subject of some controversy. It is unclear whether the crash of a 
large, fully fueled, commercial aircraft could inflict sufficient damage 
to create a significant release of nuclear material or that damaging 
other facilities such as spent fuel storage facilities or containment 
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cooling systems could cause catastrophic damage. The potential for 
successful ground- or sea-borne attacks against nuclear material or 
radioactive waste material in transit are also issues.%? Still, they are 
clearly not easy marks. Even if an attack was successfully launched, 
it is not a given that the strike would reap catastrophic effects. 


NUCLEAR 


The effects of a nuclear weapon are blast, heat, and nuclear radiation. 
Their relative importance varies with the yield of the bomb. With an 
explosion of about 2.5 kilotons (equivalent to the explosive energy of 
2,500 tons of TNT), they are all devastating and about equal in killing 
power, with immediately fatal injuries at a range of 1 kilometer. As 
the yield increases, the volume of blast and heat grow rapidly, out- 
pacing the immediate effects of radiation.*! 


Several nations possess nuclear weapons (see From the Source box). 
There are also prospects for states such as Iran and North Korea to 
field nuclear arsenals. The commercial or research nuclear infra- 
structure of any country, however, can be used as the foundation for 
a weapons program. Some of the technologies and know-how 
required for production are dual-use, well-known, and, considering 
that devices can be built with equipment available in the 1940s, not 
even state-of-the-art. On the other hand, some of these tasks, such as 
refining highly enriched uranium or constructing the explosive lens 
used to construct the core of a plutonium implosion device, can be 
technically difficult and expensive to master. In addition, claims that 
nuclear weapons can be fashioned through simpler means or by 
employing low-enriched nuclear materials seem questionable.” 


Producing Nuclear Weapons 


The most significant obstacle to fielding a nuclear device is obtaining 
the nuclear material that is necessary to produce a chain reaction that 
unleashes an atomic explosion. Acquiring highly enriched uranium 
or plutonium through industrial production would consume consid- 
erable technical, industrial, and financial resources and thus is an 
activity largely limited to states. A weapon using a design no more 
sophisticated than the U.S. bombs dropped on Japan could produce a 
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kiloton yield with as little as 25 kilograms of highly enriched uranium 
or 8 kilograms of plutonium.** Some argue, however, that more mod- 
ern weapon designs can result in a kiloton yield with as little as one 
kilogram of nuclear material.” A program capable of manufacturing 
six weapons (yielding in the range of 10 to 25 kilotons) might cost 
about $4 billion. 

Weapons are easier to produce if developers are willing to accept 
trade-offs in testing, safety, size, weight, shelf life, and yield pre- 
dictability. Foreign assistance by nuclear-capable states can greatly 
speed the progress of nuclear weapons development. On the other 
hand, these cost assessments also assume that a program would pro- 
ceed smoothly without false starts, accidents, or organizational prob- 
lems in addition to security concerns, economic constraints, foreign 
intervention, or political decisions that could significantly lengthen 
development and production times. In over a decade, for example, 
Iraq is estimated to have spent 20 times the cost of a minimal pro- 
gram and did not produce a workable bomb. 

So far, nuclear weapons have been produced only through indige- 
nous state-run programs. A nuclear shortcut might be to purchase or 
steal weapons or weapons-grade material. This is a credible threat, not 
only from enemy states, but also from well-financed nonstate groups. 
There is little reliable data on black-market prices for weapons-grade 
nuclear material, but one study suggests nominal prices for these com- 
modities could be $1 million per kilogram or more.*’ There are groups 
capable and willing to make such investments. For example, Aum 
Shinrikyo had $1 billion in resources at its disposal. Documents seized 
from the cult reveal it had an interest in buying nuclear weapons, 
though its efforts never came to fruition.°° Nor was the cult’s efforts an 
aberration. Worldwide, in the last decade 10 percent of the almost 400 
documented cases of attempted nuclear materials smuggling involved 
plutonium or highly enriched uranium. 


Nuclear Smuggling 


There are great unknowns concerning the nuclear black market. 
Publicly available information suggests most cases of attempted 
smuggling involve scam artists or amateur criminals rather than 
well-organized conspiracies. But these activities do not preclude the 
existence of a more serious threat that may be largely hidden from 
either public scrutiny or Western intelligence. Such efforts might 
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FROM THE SOURCE: 
THE NTH COUNTRY EXPERIMENT 


Designing a nuclear weapon is not the most difficult task in cre- 
ating a terrorist weapon. In the 1960s, for example, in an experi- 
ment, the U.S. government commissioned three physicists to 
design a nuclear weapon without access to classified informa- 
tion. After a year-long effort, the team produced a design for a 
workable bomb using only open-source material.” 

The following set of rules was given to the experimenters in 
memorandum form at the beginning of the Nth Country 
Experiment. 


From the Nth Country Project Report 
The Operating Rules for the Nth Country Project 


A. J. HUDGINS 


1. The purpose of the so-called “Nth Country Experiment” 
is to find out if a credible nuclear explosive can be 
designed, with a modest effort by a few well trained 
people without contact with classified information. The 
goal of the participants should be to design an explosive 
with a militarily significant yield. A working context for 
the experiment might be that the participants have been 
asked to design a nuclear explosive which, if built in 
small numbers, would give a small nation a significant 
effect on their foreign relations. 


2. An informal committee has been chosen to monitor 
this experiment. In order to provide maximum assur- 
ance that the committee does not, in fact, perturb the 
experiment in a casual or unrecorded manner, all 
communications regarding the substance of the experi- 
ment will be in writing. The men doing the experiment 
are expected to avoid conscientiously any contact 


Sauter ch09-10 3/21/05 


2:50 PM Page 175 > 


CHAPTER 9 • WEAPONS OF MASS DESTRUCTION 


175 


with classified information in order to maintain the 
integrity of the primary assumption. They may request 
further guidance or specific information from the com- 
mittee through A. J. Hudgins. 


. The experimenters are expected to use any means avail- 


able to obtain as much unclassified information as they 
believe to be pertinent. The experiment will have to be 
conducted in such a way that all sources of unclassified 
information can be explicitly identified. It is important 
that as much as possible of the progress of the experi- 
ment be put in writing. Secretarial help will be available. 


. It is not expected that the experimenters do all of the 


routine work involved in the design themselves. Help in 
computation or in other mechanics such as information 
search should be requested only through the committee. 
In each case there must be a specific request detailing the 
result desired. In other words, the experimenters must 
state the problem and their boundary conditions for its 
solution. The committee will see to it that the best 
response possible is obtained in a timely fashion. 


. Even though this experiment will be based upon the 


use of information from unclassified sources, the 
Atomic Energy Act and AEC regulations require that 
any design efforts related to nuclear explosives be 
given proper security protection. This requires that the 
work books and any elaboration or deduction from 
unclassified information be classified properly and 
that all such information be protected in accord with 
the Laboratory Security Manual. 


. For the purposes of this experiment it should be 


assumed explicitly that any material may be fabricated 
in any shape. The purpose of this assumption is to 
remove fabrication and procurement problems from 
the area of the experiment. 
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involve state or nonstate groups. Obtaining weapons-grade material 
from states such as India, Iran, North Korea, or Pakistan is possible. 
Recent revelations concerning the activities of Pakistani scientist A. 
Q. Khan show that commerce involving covert transfers of materials 
and technologies relating to nuclear weapons technologies and 
materials have become substantial in recent years.*° Another likely 
source would be siphoning material from an established, legitimate 
program with excess material. But export controls and security 
measures are a significant impediment. There are, however, gaps 
that can be exploited. Every nuclear country, including the United 
States, has some issues over the security of its materials. Some stock- 
piles around the world are particularly vulnerable. Of greatest con- 
cern, is the safekeeping of Russian nuclear weapons and material, 
which represents 95 percent of the world total outside America. It is 
known, for example, that at least 4.5 kilograms of weapons-grade 
uranium has been stolen from Russian institutes in the last 10 years. 

Overall, the enforcement of the Nuclear Nonproliferation Treaty 
and the effectiveness of U.S. initiatives have had a mixed record of 
success.*! As far as is known no group has successfully bought or 
stolen weapons or has the capability to build a weapon. This is cold 
comfort. These weapons are highly sought after. 


Delivering Nuclear Weapons 


Nuclear weapons can be delivered by ballistic missiles or cruise mis- 
siles or smuggled to the continent by ships or aircraft. Britain, China, 
France, and Russia all have nuclear-tipped ballistic missiles that can 
reach targets in the United States. For enemies of the United States, 
the state of their technical skills and resources may determine the 
choice of delivery means. Building nuclear warheads in the 500-kilo- 
gram or smaller range is a significant technical challenge. Terrorists 
would likely be limited to attempting to smuggle a nuclear weapon 
or its components into the United States. 


HIGH-YIELD EXPLOSIVES 


Before September 11, 2001, the two most notable terrorist attacks on 
the United States in recent memory were the bombing of the Murrah 
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Scope of 
Explosive Threat 


office building in Oklahoma City and the February 26, 1993, bombing 
of the World Trade Center. While little discussed of late, the use of 
large explosive devices are a formidable threat and will remain so in 
the years ahead. 


Bombs kill by blast effects, flying debris, and ensuing fires, toxic 
releases, or other damage wrought by the explosion. In a conventional 
explosive, energy is derived from a sudden, violent chemical reaction. 
High explosives are materials that have a very fast rate of explosive 
reaction, emitting a detonating wave that can move up to 9,000 meters 
per second. Large, or high-yield, conventional explosive devices can 
either be manufactured bombs or improvised explosive devices. 


Delivery of Weapons 

Weapons can be delivered by a wide variety of means including mis- 
siles, UAVs, and bombs covertly transported by air, land, and sea 
vehicles. The delivery system will largely determine the scale of the 
attack. Virtually any size group could undertake a large-bomb attack 
employing some form of covert delivery means. For example, the 
strike on the Murrah office building in Oklahoma City, executed by 
two individuals with limited means, consisted of a truck bomb carry- 
ing 4,800 pounds of explosives. It caused tens of millions of dollars in 
damage and killed 168 people.” 

While a wide range of groups could undertake high-yield explo- 
sive attacks, it is unlikely that any one strike could achieve cata- 
strophic destruction. For example, by one analysis, the resources 
required to respond to the detonation of a very large high-yield 
explosive weapon would be less than one-third the response force 
required in the wake of a 10-kiloton nuclear blast. The reduced 
response size gives some indication of how conventional explosives 
compare with nuclear arms. It should be noted, however, that high- 
yield explosive devices employed against some critical infrastructure, 
such as dams, nuclear plants, and chemical factories, might have the 
potential to trigger a near-catastrophic event. 


Obtaining High-Yield Explosive Weapons 


High-yield explosive devices can be obtained in a number of ways. 
Military bombs, submunitions, and explosives can be illicitly bought 
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or stolen. Submunitions, for example, are manufactured by 33 coun- 
tries. Fifty-six nations stockpile submunitions, and 18 of these are not 
members of the Convention on Certain Conventional Weapons, 
which is designed to limit the spread of some types of military hard- 
ware.“* The Wassenaar Arrangement lists submunitions as a con- 
trolled munition, but participation in the arrangement is voluntary 
and can be circumvented. 

Weapons can also be fashioned from commercial explosives and 
other chemicals using information from books, magazines, and the 
Internet. In fact, a 1997 Department of Justice report concluded that 
anyone interested in manufacturing a bomb could easily obtain 
detailed instructions from readily available sources. Al-Qaida pro- 
duced its own bomb-making instructions in books, CD-ROMs, and 
videos. 

Bomb-making materials are not difficult to obtain. Commercial 
explosives are readily available. For example, in 2001, 2.38 million 
metric tons of explosives, used for a wide variety of industrial and 
commercial purposes, were manufactured within the United States.*° 
Bombs can also be synthesized from a variety of readily available 
chemical precursors, all with legitimate commercial uses, such as 
ammonium nitrate, sodium nitrate, potassium nitrate, nitromethane, 
concentrated nitric acid, concentrated hydrogen peroxide, sodium 
chlorate, potassium chlorate, potassium perchlorate, urea, and ace- 
tone. For example, the bomb employed in the 1993 World Trade 
Center attack consisted of approximately 500 to 700 kilograms of a 
fertilizer-based explosive and three large metal cylinders (about 60 
kilograms) of compressed hydrogen gas.*” 


CHAPTER SUMMARY 


Weapons of mass destruction (WMD) are often referred to as chemi- 
cal, biological, radiological, nuclear, or high-yield explosive (CBRNE) 
arms. Despite the WMD moniker not all CBRNE weapons are capa- 
ble of inflicting catastrophic harm, resulting in tens of thousands of 
casualties and hundreds of billions of dollars in damage. Nuclear 
arms are the most dangerous, but they are difficult to obtain or man- 
ufacture. Biological or chemical arms can be produced more easily, 
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but delivering them in ways that cause significant casualties is far 
from easy. On the other hand, producing biological, chemical, and 
radiological weapons that can inflict some casualties, as well as sig- 
nificant psychological and economic disruption, are eminently 
achievable, even by terrorist groups with limited assets. 


CHAPTER QUIZ 


1. Why is the size of chemical, biological, or radiological particles 
an important factor in determining the risk of casualties? 

2. Why are nonproliferation treaties an inadequate guarantee that 
CBRNE weapons can be kept out of the hands of terrorists? 

3. What means might be used to reduce casualties from a dirty 
bomb? 

4. What are precursors, and why are they important for determin- 
ing the potential of terrorists to produce biological and chemical 
weapons? 

5. What is the most likely CBRNE weapon to be employed by a 
terrorist group? 

6. What emergency response measures might be applicable to all 
CBRNE threats? 

7. How might weather and terrain affect chemical or biological 
weapon attacks? 

8. What CBRNE threats are limited to enemies with substantial 
resources and industrial capacity? 

9. What attacks on critical infrastructure might create CBRNE-like 
affects, and how likely are they? 

10. What are the likely means of delivering CBRNE weapons? 


NOTES 


1. The scope of the cult’s chemical weapons program is described in Robert Jay Lifton, 
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. Bureau of Arms Control, “Chemical Weapons Convention Signatories /Ratifiers” 


(November 12, 2001), www.state.gov/t/ac/rls/fs/2001/956.htm. More information on the 
Chemical Weapons Convention is available on the convention Web site, 
www.opcew.org/html/glance/index.html. The text of the Chemical Weapons Convention 
is at www.cwc.gov/treaty. 


. In 1999, Russia still had some 40,000 metric tons of chemical weapons. Igor Khripunov and 


George W. Parshall, “U.S. Assistance to Russian Chemical Weapons Destruction: Identifying 
the Next Step,” The Nonproliferation Review (Fall 1999): 1. U.S. efforts to provide funds and 
assistance for the destruction of these stocks have been ongoing since 1996, but progress has 
been intermittent. A signatory to the Chemical Weapons Convention, Russia is obliged to 
destroy its chemical weapons stocks. In June 2001, it declared it could not meet its commit- 
ment to eliminate its chemical arsenal by 2007 and required a five-year extension. The 
Organization for the Prohibition of Chemical Weapons recently stated its doubts that the 
country has the means to achieve this goal. The United States also has chemical weapons 
stored and waiting destruction at eight sites across the country and at Johnston Atoll in the 
Pacific. Department of Defense, “U.S. Chemical Weapons Stockpile Information 
Declassified” (January 22, 1996), www.defenselink.mil/news/Jan1996/b012496_bt024- 
96.html. 


. The Australia Group meets annually to discuss export licensing measures of its 34 partici- 


pant nations. Members in the Australia Group do not undertake any legally binding obli- 
gations; rather they rely on nations to establish and supervise controls. For more 
information see the group’s Web site, www.australiagroup.net/index_en.htm. 


. Office of Technology Assessment, Proliferation of Weapons of Mass Destruction: Assessing the 


Risks (August 1993), p. 53, www.wws.princeton.edu/cgi- 
bin/byteserv.prl/~ota/disk1/1993/9341/934101.PDF. 


. For more on chemical risks see Environmental Protection Agency, The Chemical Safety Audit 


Report FY 1997 (October 1998), passim, www.epa.gov /swercepp/pubs/97report.pdf. See 
also Testimony of Paul Orum before the Subcommittee on Superfund, Toxics, Risk, and 
Waste Management, Senate Environment and Public Works Committee (November 14, 
2001); James C. Belke, “Chemical Accident Risks in U.S. Industry—A Preliminary Analysis 
of Accident Risk Data from U.S. Hazardous Chemical Facilities,” (Environmental 
Protection Agency, September 25, 2000). The EPA defines a worst-case scenario as the 
release of the largest quantity of a regulated substance from a single vessel or process line 
failure that results in the greatest distance to the endpoint. 


. Hazardous Substance Emergency Events Surveillance, Cumulative Report 1993-1997 (New York 


State Department of Health, September 1999), p. 4. 


. Union Carbide, Bhopal, India, Lessons Learned: Ammonium Nitrate and Nitric Acid Hazard and 


Response. 


. See Theodore Karasik, Toxic Warfare (Santa Monica, CA: Rand, 2002), passim. 


For example, to generate a dose of 25 milligrams in the first quarter liter (about a cup) that 
a person might drink from a 200,000 gallon clear well would require 188 kilograms of 
cyanide. See Donald C. Hickman, “A Chemical and Biological Warfare Threat: USAF 
Water Systems at Risk” (USAF Counterproliferation Center, US Air War College, 
September 1999), fn 53, www.au.af.mil/au/awc/awcgate/cpc-pubs/hickman.htm. 

J. M. Madsen, “Toxins Are Weapons of Mass Destruction: A Comparison and Contrast 


with Biological-Warfare and Chemical-Warfare Agents,” Clinical Laboratory Medicine 3 
(2001): 593-605. 


Current efforts to strengthen the convention have stalled on developing a legally binding 
protocol to increase confidence in compliance. There are strong technical and political dis- 
agreements on the goals and means of verification. Countries with large commercial and 
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defense sectors in biological research have expressed a number of concerns. As of May 
2004, 31 countries had not signed the Biological and Toxin Weapons Convention. For a 
list, see projects.sipri.se/cbw/docs/bw-btwc-nonsig.html. In addition, absent formal pro- 
tocols for preventing the spread of biological arms, the Australia Group is working to 
minimize the risks of biological weapon proliferation through transshipment or export. 
The text of the convention is given at 
www.brad.ac.uk/acad/sbtwc/btwc/convention/documents /btwctext.pdf. 


Judith Miller, et al., Germs: Biological Weapons and America’s Secret War (New York: Simon & 
Schuster, 2001), pp. 26-27. 


For more about the American Type Culture Collection, see the Web site at 
wwwaatcc.org/About/AboutATCC.cfm. In addition to the American Type Culture 
Collection, there are about 200 laboratories in the United States that maintain germ collec- 
tions. The Department of Health and Human Services’ Select Agent Registration 
Enforcement Program is responsible for tracking the transfer of pathogens for scientific 
and medical research. Distributing materials in the United States and internationally is 
also subject to regulation by the Departments of Agriculture, Commerce, Energy, Interior, 
Justice, Labor, State, Transportation, Treasury, Homeland Security, International Air 
Transport Association, and Environmental Protection Agency. 


The smallpox disease has been eradicated. The only known stocks of smallpox, for exam- 
ple, are secured in the Institute of Virus Preparations in Russia, and the Centers for 
Disease Control and Prevention in the United States. There is widespread concern that 
seed stocks of smallpox may still exist outside the two official repositories. This fear is 
principally due to the vast biological weapons program run by the Soviet Union, which 
included weaponizing smallpox. The Russian government claims that all the stocks used 
in this program have been accounted for, but some analysts, including Ken Alibek, a for- 
mer deputy director in the Soviet bioweapons program, believe that unregistered stocks 
may still exist. There are rumors, for example, that North Korea may have obtained small- 
pox stocks from Russian sources. There is also some fear that smallpox could be extracted 
from the remains of victims. The Soviets conducted research expeditions to recover 
remains buried in the permafrost in Siberia and extract genetic materials. It is unlikely 
that a living organism or viral DNA was extracted from the material. See Kenneth Alibek, 
“Biological Weapons in the Former Soviet Union: An Interview with Dr. Kenneth Alibek,” 
The Nonproliferation Review (Spring/Summer 1999): 9. On the other hand, scientists have 
recovered and revived frozen microbes from the Antarctic that were thousands of years 
old. This research indicates that the DNA for some bacteria can remain viable up to a mil- 
lion years, suggesting that the recovery of exterminated diseases, given the right environ- 
mental conditions, is not impossible. 


Spray drying is the most widely used industrial process for forming and drying solid par- 
ticles. Spray drying involves atomizing a liquid feedstock into a spray of droplets that are 
dried with hot air. 


Statement of W. Seth Carus before a Joint Hearing of the Senate Select Intelligence 
Committee and the Senate Judiciary Committee (March 4, 1998), judiciary.senate.gov /old- 
site /carus.htm. 


The bacteria thrived in the water of the hotel cooling tower. As water was lost into the air 
by evaporation, clouds of droplets containing legionellas were drawn into the air intakes 
of the building or may have fallen on passersby. “Legionnaires’ Disease,” OSHA Technical 
Manual, Section III, Chapter 7, www.osha-slc.gov/dts/osta/otm/otm_iii/otm_iii_7.html; 
D.W. Keller, et al., “Community Outbreak of Legionnaires’ Disease: An Investigation 
Confirming the Potential for Cooling Towers to Transmit Legionella Species,” Clinical 
Infectious Diseases 22(1996):257-261. 
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Department of Agriculture,” BCSIA Discussion Paper 2000-29, ESDP Discussion Paper 
ESDP-2000-04, John F. Kennedy School of Government, Harvard University (October 
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Laboratory and US Department of Energy, Richland Operations Office, July 2002). 
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Forces Radiological Research Institute, 1999), pp. 4-9; “Shielding Use and Analysis,” 
Hanford ALARA Reference Center, pp. 1-4, www.hanford.gov /alara/PDF/analysis.pdf. 


In one proposed scenario it was estimated that a device consisting of 100 kilograms of C-4, 
50 grams of cesium-137, and 2 kilograms of plutonium detonated in a convention center 
in San Diego would kill 31 and possibly result in up to 1,969 additional fatalities and 
sicken 6,569. NBC Scenarios: 2002-2010 Center for Counterproliferation and the Defense Threat 
Reduction Agency, (Washington, DC: Center for Counterproliferation, April 2000), pp. 14, 
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United Nations, Tenth Report of the Executive Chairman of the Special Commission estab- 
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Special Commission, $/1995/1038 (17 December 1995), part VII. 
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Risks,” Monteray Institute of International Studies, Occasional Paper, 11 (January 2003), 
pp. 45, 64. 


For example, one scenario of a radiological dispersal device attack on New York City sug- 
gests residents in a 1,000 square kilometer area could suffer death rates from cancer rang- 
ing from 1 in 10 within a kilometer of the attack, to a 1 in 100 risk for all those living in 
Manhattan, and a 1 in 10,000 for those living up to 15 kilometers downwind of the attack. 
See Testimony of Henry Kelly. These figures, however, are not for immediate casualties, 
but for long-term cancer risks. They do not include accounting for factors such as the pro- 
tective effects of buildings, medical treatment, or cleanup. In addition, this analysis was 
based on radiation-exposure standards derived from Environmental Protection Agency 
and Nuclear Regulatory Commission guidelines and does not address the fact that these 
standards are somewhat controversial and may overstate long-term threats. The modeling 
used for this scenario draws on linear no-threshold theory (LNT). See Michael Levi and 
Henry Kelly, “Dirty Bombs Continued,” FAS Public Interest Report 55 (May 2002), LNT 
holds that any amount of radiation dose, even those close to zero, is harmful. Therefore, 
low-dose exposure is assumed to have similar effects to high-dose exposure, but with 
lower incidence (i.e., less casualties per the number exposed). There is no scientific con- 
sensus over whether LNT is appropriate for accurately predicting casualties. For contrast- 
ing views on the debate see Myron Pollycove, “The Rise and Fall of the Linear 
No-Threshold (LNT) Theory of Radiation Carciogenesis,” Presentation to the Institute of 
Physics (1997), cnts.wpi.edu/RSH/Docs/PollycovePhysics.html; Richard Wakeford, “Low 
Dose Irradiation—A Threshold Assumption Is Inappropriate,” Paper presented to the 
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CA: Electronic Research Institute, 2002), passim. 
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For details see Cleanup of Large Areas Contaminated as a Result of a Nuclear Accident, 
International Atomic Energy Agency, Technical Reports Series No. 300 (Vienna, 
International Atomic Energy Agency, 1996), passim; United States House of 
Representatives, Committee on Interior and Insular Affairs, Subcommittee on Oversight 
and Investigation, “Calculation of Reactor Accident Consequences (CRAC2) for U.S. 
Nuclear Power Plants (Health Effects and Costs) Conditional on AN SST1 Release” 
(November 1, 1982). 


Project on Government Oversight, Nuclear Power Plant Security: Voices from Inside the Fences 
(Washington, DC: Project on Government Oversight, September 12, 2002); Douglas M. 
Chapin, et al., “Nuclear Power Plants and Their Fuel as Terrorist Targets,” Science 297 
(September 20, 2002): 1997-1999. 


For, example, by one analysis, a 12.5-kiloton nuclear explosion in the port area of New 
York City would kill 52,000 people outright and another 10,000 from injuries. There could 
also be several hundred thousand cases of radiation sickness. See Ira Helfand, et al. 
“Nuclear Terrorism,” British Medical Journal 324 (February 9, 2002): 356. For a discussion 
on the factors that affect the level of casualties and destruction in the wake of a nuclear 
detonation see Office of Technology Assessment, The Effects of Nuclear War (Washington, 
DC: Congress of the United States, May 1979), pp. 3-12. 


Gururaj Mutalik, et al., Crude Nuclear Weapons: Proliferation and the Terrorist Threat 
(Cambridge, MA: International Physicians for the Prevention of Nuclear War, 1996), p. 10. 
A report in USA Today stated that U.S. scientists have secretly demonstrated in experi- 
ments that bombs could be built with low-enriched material, though it is unclear how 
practical such devices would be as weapons or whether the results of a detonation would 
approximate the explosive power of a nuclear weapon. Peter Eisler, “Fuel for Nuclear 
Weapons Is More Widely Available,” USA Today (February 27, 2002): 1. 


The most common and commercially viable methods for enriching uranium (i.e., separat- 
ing out uranium 235 molecules from natural uranium) are gaseous diffusion (accounts for 
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Sauter ch09-10 


184 


3/21/05 


2:50 PM Page 184 fb 


34. 


35. 


36. 


37. 


38. 


39. 


40. 


41. 


42. 


43. 


PART 2 • UNDERSTANDING TERRORISM 


These estimates are made by the International Atomic Energy Agency. See IAEA Safeguards 
Glossary, 1987 Edition, IAEA Safeguards Information Series No. 1 (Vienna: International 
Atomic Energy Commission, 1987), pp. 23-24. 
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THE DIGITAL BATTLEFIELD 
Cyberterrorism and Cybersecurity 


The whole system is going to crash—a digital Pearl Harbor of sorts. 


Scott Berinato, CIO Magazine 


CHAPTER OVERVIEW 


Cyberterrorism is a poorly understood threat. This chapter describes 
forms of terrorist attack and discusses the potential effects of a ter- 
rorist cyberattack and means to protect against these dangers. It 
addresses protecting both the government and commercial sector 
against terrorist threats. In addition, this chapter highlights other 
ways that terrorists use the Internet and information technology to 
prepare for, support, and conduct attacks. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


Describe the most likely sources of a digital attack. 
Describe the ways that cyberattacks might be conducted. 


List the principles and steps to preventing and preparing for 
a terrorist attack against information systems. 


4. Identify the various ways that terrorists use information 
technology. 
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THE THREAT 


Robert Hanssen was a model FBI agent. Hanssen was in charge of 
counterintelligence operations, finding out people who were spying 
on the United States. It was the most secret and sensitive work in the 
agency. Hanssen was considered an expert in the field. The only prob- 
lem was that he was working for the other side. Arrested in February 
2001, Hanssen had spied for the Soviet Union for well over a decade. 
As an authorized user of highly classified computer systems, 
Hanssen was able to employ various means for stealing sensitive data 
including encrypted floppy disks, removable storage devices, and a 
Palm handheld device. 

While many fear terrorists may attempt a digital “Pearl Harbor” to 
cripple the Internet, the range of possible concerns is far broader. 
Cyberwarfare can take many forms. The Hanssen case is a reminder that 
the infinite benefits of digital technology bring infinite concerns as well. 


Digital attacks include a range of activities: stealing information and 
services, corrupting data, covertly monitoring or taking remote con- 
trol of computers, and shutting down entire systems. Attacks may be 
against defined entities such as individual computers, or against the 
Internet itself, attempting to deny or degrade access to a large num- 
ber of users. 


INSIDER ATTACKS 


Surveys continue to suggest that the highest percentage of illicit com- 
puter activity is from “insiders,” in other words, actions by current or 
former employees, either malicious acts or crimes intended for per- 
sonal profit.! The continued prevalence of internal threats is under- 
standable. Employees have the greatest access to computers and 
business records and thus are often in a position for the unauthorized 
viewing, use, entry, or alteration of data to produce false transactions 
and tamper with information or sabotage systems. In some cases, 
these acts can be extreme. In one case, a law enforcement agent 
obtained information from the National Crime Information Center 
(NCIC) to track and down and murder his girlfriend.” 
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Insiders could also be instruments for conducting terrorist attacks, 
but coordinating a deliberate act of terrorism through an insider oper- 
ative requires either recruiting or placing agents with the appropriate 
skills and knowledge in positions where they can gain access to the 
system to be struck. Such tactics are not inconceivable. In 1997, a dis- 
gruntled Coast Guard employee used her programming skills to 
crash the service’s nationwide computer system.’ A terrorist act 
might evolve in a similar way. 


OUTSIDER ATTACKS 


Although less in number, some security analysts consider the threat 
of outside attacks a potentially even more significant security risk. 
The overwhelming majority of these attacks occur through the 
Internet, which could originate from anywhere in the world and 
attack any system accessed through the World Wide Web. 

Accurate, unclassified intelligence on the source of attacks and the 
capabilities of various states and transnational organizations is lim- 
ited. Information on individual illicit activity against the commercial 
sector is more widely available. According to one study, attacks 
against commercial industries worldwide are undertaken mostly by 
individuals, with 70 percent of these intrusions originating from 10 
countries.* The most frequent attacks are directed against high-tech 
companies, financial services, media/entertainment services, and 
power and energy companies. 

Virtually any state or nonstate group can launch a digital attack. 
An offensive cyberweapon can be fashioned with a single, individ- 
ual computer and a modem. Mastering the skills to plan and con- 
duct a rudimentary digital strike is not difficult. There is a vast 
amount of material available in open-source literature that explains 
how to attack computer systems.° In fact, cybercrime, attacking 
computer systems for personal gain, is already a real and growing 
problem. Cost estimates of illicit computer activity vary consider- 
ably, but certainly the economic damage is in the range of billions of 
dollars a year. Enemies can adopt many of the methods of cyber- 
crime to digital attacks or employ cybercrimes to supplement other 
activities. 
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CYBERATTACKS 


Cyberattacks consist of packets of information sent to specifically tar- 
geted computers or distributed randomly via the Internet. These in- 
bound packets consist of external and internal components. The 
external component is routing information that gives the source and 
destination of the packet, much like an address on a letter. The inter- 
nal component is the content of networked information, such as the 
body of an e-mail, computer programs, or graphic, audio, or video 
files. Some attacks rely on external components to create “packet 
flooding,” sending so many packets that it exceeds the capacity of 
bandwidth, processing power, or storage capacity at a transit or end 
point in the system. Alternatively, the internal components of a 
packet might be instructions, which could perform various digital 
attacks like ordering a system to simply shut down. 


Malicious codes can strike computers in a number of ways. 
Programs might include a “trap door” or “back door” instructions 
to allow an attacker to gain access to a computer whenever the 
intruder wishes. A malicious code could be a “Trojan horse” (a code 
hidden in a legitimate program that directs unauthorized func- 
tions), a virus (a self-replicating code that attacks single computers), 
a worm (which infects multiuser systems), or a logic bomb (a time- 
delayed virus that strikes some time after it enters a computer sys- 
tem). Packet instructions can also direct propagation, having an 
infected system replicate attack instructions and forward them to 
other systems. Some analysts forecast the development of intelligent 
superworms that prescreen systems to identify vulnerabilities and 
direct their agents to attack specific computers, control certain func- 
tions, and coordinate the activities of controlled computers across 
the Internet.” (See Figure 10.1.) 


Digital attacks could be used for everything from disrupting commu- 
nications to causing physical destruction. For example, an enemy 
might attempt to create a catastrophic failure in the Supervisory 
Control and Data Acquisition (SCADA) systems of the national 
energy network. Such systems monitor and control the flow of oil and 
gas through pipelines and the transfer of electricity across transmis- 
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Potential Effects 
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sion lines. An attack might cause power outages, spark explosions, 
and unleash fuel spills.® 


Even modest digital strikes can inflict costly damage. The I Love You 
virus, unleashed in May 2000 by a single hacker, infected over one 
million computers worldwide in less than five hours, eventually 
creating an estimated $10 billion in damages and lost productivity.’ 
On the other hand, as with many other threats, scale matters. 
Enemies with advanced technical skills, robust intelligence systems, 
access to substantial computer and telecommunications assets, and 
ample funds will represent a significantly greater threat than indi- 
vidual hackers or terrorists using commonly available intrusion 
software. For example, an exercise sponsored by the U.S. Naval War 
College determined that a large-scale strike required an effort of 
about $200 million, access to a state intelligence network, and five 
years to plan.!0 


TERRORIST USE OF CYBERSPACE 


The Internet is normally thought of as a target for terrorists, though it 
is used far more frequently as an instrument to support their activi- 
ties. Today, all active terrorist groups have an established presence on 
the Internet using hundreds of Web sites. These sites are used to serve 
terrorists and their support groups, communicate with potential sup- 
porters, and influence the international press.!! 

One use of the Internet is to conduct psychological warfare, an 
attempt to spread rumors, disinformation, and threats that will 
undercut public confidence and morale. For example, since the 
September 11 attacks, al-Qaida has produced Web sites with frequent 
warnings of even larger impending attacks against the United States. 
The content of the sites are often reported by the Western media, 
which in turn generates concern over terrorist threats. 

The Internet is also used by terrorists for publicity and propaganda 
purposes. Web sites are used to explain and justify activities. They can 
be used to recruit new members, solicit funds, or communicate infor- 
mation to the international media. The Basque separatist organization 
ETA, for example, maintains Web sites in several languages. 
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Consequences 
of an Attack 


Terrorists also view the Internet as a vast library for obtaining and 
sharing information. The Internet has been used to gather intelligence 
from public sources on potential targets. Web sites are also used to 
share information from tutorials on how to spread computer viruses 
to how to manufacture bombs and poisons. Many terrorist Web sites 
post The Terrorists Handbook and The Anarchist Cookbook, two well- 
known manuals that describe a variety of bombmaking techniques. 

Finally, terrorists use the Internet to plan and coordinate opera- 
tions. Chat rooms, e-mail, and information posted both overtly and 
covertly on Web sites are all employed to send and receive instruc- 
tions. For example, federal officials found thousands of encrypted 
messages from the password-protected area of a Web site on the com- 
puter of Abu Zubaydah, the reported mastermind behind the 
September 11 attacks. 


THE CURRENT STATE OF DEFENSES 


Since a digital strike may cross several countries, Internet service 
providers, and telecommunications linkages, all subject to varying 
legal requirements, reporting standards, and capabilities to monitor 
Internet traffic, tracing the source of an attack may be problematic, if 
not impossible. There is no international regime or convention gov- 
erning digital attacks equivalent to prohibitions against other means 
such as chemical or biological weapons. Further complicating the 
challenge of attributing digital attacks is a recent trend in illicit com- 
puter activity to initiate actions from multiple points through auto- 
mated means, rather than individual manual entries. The automated, 
multiple-point attacks are more difficult to block, and the origins 
problematic to identify. Even if illicit intrusions are recognized, it may 
be hard to distinguish digital attacks from other activities such as 
recreational hacking or cybercrime. 


While there are opportunities for dramatic incidents, computer 
attacks may have difficulty achieving desired objectives. As the pace 
of illicit computer activities has risen so have countermeasures 
designed to block them. Estimates of spending on security vary con- 
siderably, but it is clear that the commercial and government sectors 
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are investing billions of dollars in Internet security software including 
firewalls, intrusion-detection and anti-worm/virus programs, digital 
certificates, and authentication and authorization programs, as well 
as billions more on disaster recovery initiatives designed to retrieve 
data or capabilities in the wake of a debilitating digital or physical 
attack. According to one recent study, spending could increase to $6.7 
billion by 2004.12 


Defeating systems that employ sophisticated encryption software can 
be especially time-consuming and expensive. The computing power 
available to the average individual at reasonable cost will no doubt 
grow in the near future. Price performance for computer power has 
been dropping by 20 to 30 percent a year, but this is an advantage 
available to both sides. Security standards are continually evolving to 
match emerging threats. The United States, for example, is moving 
toward an advanced encryption standard of 128-bit key size in order 
to outpace the ability of decryption programs to defeat security safe- 
guards. Public key infrastructure (PKI), a system designed to ensure 
the capability to conduct secure transactions online, is also being 
implemented by both the government and commercial sectors. 

Indeed, attention to the challenges of protecting information 
infrastructure has grown steadily in recent years. In 1998, the 
Department of Defense conducted exercise Eligible Receiver, during 
which a team of 35 experts from the National Security Agency was 
given three months to plan and execute an attack on defense secu- 
rity systems using commonly available hardware and software. The 
team claimed if it had actually conducted the attack, it would have 
brought down the Department of Defense command and control 
systems, as well as major portions of the national electric power 
grid, and 911 systems. Some doubted these claims, and the 
Department of Defense did not provide public reports that could be 
used to verify them. Yet, this exercise served as a clarion call for 
increased investments in information security technology. Y2K 
preparations further spurred new management initiatives.!° Over 
the years, government, business, and voluntary international organ- 
izations have also become more adept at identifying computer 
attacks on the Internet and distributing warnings and countermea- 
sures against future threats.1° 
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Government 
Efforts 


The government, in particular, is making more deliberate efforts to 
counter intentional digital attacks than it was just a few years ago. 
Recently, for example, the National Institute of Standards and 
Technology issued a draft of the first comprehensive guidelines for 
federal agencies to evaluate and certify the safety of their computer 
systems against cyberattacks.!” 

Government efforts may be having some impact. One study finds 
that while the number of illegal intrusions continues to grow, the 
number of attacks on U.S government systems has declined since its 
peak in 2001. The study recorded 2,031 overt attacks on government 
systems in 2001 and projected 1,400 attacks would be made in 2002, 
perhaps suggesting that government systems are less seen as a source 
of “low-hanging fruit” for digital attacks.18 


Government Vulnerabilities 


For all this effort, there is still much vulnerability in public informa- 
tion systems. Even in the areas that are supposed to be protected there 
are a number of important concerns. The Department of Defense, for 
example, relies largely on commercial off-the-shelf systems (COTS) 
for most of its computer needs.!? The department also depends on 
leased commercial telecommunications support. Thus, key elements 
of “secure” systems can be largely dependent on less secure public 
infrastructure, software, and equipment. 

The operational practices of some government organizations are 
also a problem. Even self-assessments by the Department of Defense 
and other federal agencies acknowledge significant management 
issues and poor security practices.”° The condition of state and local 
efforts is also an issue. Preparedness varies greatly from region to 
region. Many state and local law enforcement agencies lack the high- 
end computer forensics training and capabilities needed to deal with 
computer attacks or other forms of electronic crimes, though effective 
systems are widely available.” 


Cyberspace Security Response 


One of the first priorities of the federal government is the creation of 
a national cyberspace security response system. To oversee this effort 
the DHS created the National Cyber Security Division (NCSD) under 
its Information Analysis and Infrastructure Protection Directorate. 
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The NCSD was built upon capabilities transferred to the DHS from 
the former Critical Infrastructure Assurance Office, the National 
Infrastructure Protection Center, the Federal Computer Incident 
Response Center, and the National Communications System. The 
missions of the NCSD include conducting cyberspace analysis, issu- 
ing alerts and warnings, improving information sharing, responding 
to major incidents, and aiding in national-level recovery efforts. The 
NCSD also operates the department’s Science and Technology 
Directorate to provide requirements for research and development 
efforts. 


FROM THE SOURCE: 
GUIDELINE FOR THE SECURITY OF INFORMATION SYSTEMS 


In 1996, the Department of Commerce’s National Institute of 
Standards developed a set of principles to guide information 
security programs. 


Accountability. The responsibilities and accountabilities of own- 
ers, providers, and users of information should be explicit. 


Awareness. Owners, providers, users, and other parties 
should readily be able, consistent with maintaining secu- 
rity, to gain appropriate knowledge and be informed about 
measures for the security of information systems. 


Ethics. The information systems and the security of informa- 
tion should be provided and used in such a manner that the 
rights and legitimate interests of others are respected. 


Multidisciplinary. Measures, practices, and procedures for the 
security of information systems should address all relevant 
considerations. 


Proportionality. Security level, costs, measures, practices, and 
procedures should be appropriate and proportionate to the 
risks and vulnerabilities and the value and degree of 
reliance on the information system. 
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Integration. Measures, practices, and procedures should be 
coordinated and integrated with other security and busi- 
ness practices to create a coherent security system. 


Timeliness. Public and private parties should act in a timely 
coordinated manner to prevent and respond to security 
breaches. 


Reassessment. The security of information systems should be 
reassessed periodically. 


Democracy. The security of information systems should be 
compatible with the legitimate use and flow of data and 
information in a democratic society.” 


The public-private architecture that supports the national response 
system consists of several components. The US-CERT is a partnership 
between the DHS and the private sector. The US-CERT relies on col- 
laborative partnerships with computer security incident response 
teams (CSIRTs). The CSIRTs are individual teams that work together 
voluntarily as a network to deal with computer security problems 
and their prevention. These security and computer responses have 
been established in government, commercial, and academic organi- 
zations. Each CSIRT has a constituency, a group of users or organiza- 
tions that are served by the team; these may be members of a specific 
agency such as a company or university; a computer network; or rep- 
resentatives of certain operating systems. The functions, size, capa- 
bilities, and staff for these organizations can vary a great deal. CSIRTs 
are funded through a variety of means. 

Information is also shared through the private sector with 
Information Sharing and Analysis Centers (ISACs). ISACs are indus- 
try groups formed to give companies that own and operate elements 
of national critical infrastructure a place to exchange information 
about security threats and vulnerabilities. 

In addition to these organizations the NCSD coordinates with 
Internet service providers (ISPs), security product and service 
providers, and other organizations participating in cyberattack 
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watch, warning, and response functions. The organizations include 
industry trade groups such as the Electronics Industry Association 
and private entities like Carnegie Mellon University’s CERT 
Coordination Center. 


ISSUES: 
TAKING THE OFFENSIVE—WHAT TO DO? 


The nation’s capacity to preempt, deter, and respond to cyberas- 
saults is problematic. Countering digital threats with foreign 
policy, legal, and economic instruments is difficult because of the 
problems in attributing responsibility for attacks and the lack of 
international consensus and frameworks for dealing with cyber 
issues.” Many attacks are likely to take place through the illegal 
use of commercial systems. Enemy states might attempt to 
escape the prospect of large-scale digital warfare with the United 
States by conducting small, discrete strikes that place a premium 
on avoiding attribution of the attacker’s identity. Nonstate 
groups (particularly if they can avoid attribution) may be unde- 
terred by any threat posed by U.S. offensive capabilities. In fact, 
many governments, including that of the United States, have lit- 
tle control over the actions of individual groups of computer 
users. In December 1998, a group of anonymous hackers known 
only as the Legion of the Underground (LoU) declared war on 
Iraq and China for “human rights abuses,” calling for an assault 
on all computer systems in the two countries. Many of the 
details of this incident are unconfirmed, but it appears the group 
declared its effort was inspired by hackers in China known as 
the Hong Kong Blondes, which as it later turned out may have 
never existed. After worldwide protests by other hacker groups, 
LoU withdrew its declaration. While it seems that no cyberat- 
tacks were ever actually conducted, the incident demonstrates 
the kind of convoluted and murky battles that may emerge on 
the Internet in the future.” Even if the United States identifies 
the country of origin for a major attack, it may be difficult to tell 
if the act is state-sponsored or a rogue individual act. 
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Not only may America not know who it is combating, it may 
be impossible to evaluate the real nature of current threats and 
what they portend for the future. There is, for example, little 
unclassified information on the nature of state threats. In addi- 
tion, statistical information on illicit computer activity is 
extremely soft. Data on the commercial sector are obtained from 
surveys of corporations and security experts, often drawing 
sweeping results from the very few surveys returned and 
assuming corporate responses are completely honest and accu- 
rate in describing their own vulnerabilities. Statistics on the level 
of both government and commercial intrusions are also suspect. 
Most are based on estimates, since many systems cannot deter- 
mine with any accuracy all illicit activity. Finally, the level of 
damage and disruption caused by worst-case digital attacks is 
unclear. There are no consistent criteria for accounting for lost 
productivity. In short, there is little useful historical data with 
which to evaluate threat trends and predict future require- 
ments.”° 


1. Why is it difficult to go after those responsible for terrorist 
cyberthreats? 


2. What can the United States do to proactively reduce terror- 
ist cyberthreats? 

3. Is this a problem the federal government should worry 
about? Who should be responsible? 


PROTECTING YOUR BUSINESS 


Private-sector institutions such as businesses, schools, hospitals, and 
nonprofit organizations of all sizes can and should take precautions 
against cyberattacks. According to one survey one out of every three 
businesses in the United States was affected by MyDoom, a com- 
puter virus spread through the Internet in January 2004 that 
exploited Microsoft software. Security experts generally agree on the 
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basic principles of a sound information technology security pro- 
gram. In addition, best practices suggest commonsense measures 
that even small companies can take to protect themselves against 
digital attacks. 


A key consideration in establishing cyberdefenses is that security 
solutions must be consistently applied across the organization. Gaps 
in security measures from either inadequate technologies or lax secu- 
rity practices will leave an entire information system vulnerable to 
intrusion. 

The best way to validate and maintain security is by establishing a 
risk management program, a structured sequence of activities 
designed to produce a plan that makes sense for the organization 
based on its needs and the technology available. A risk management 
program would include implementing security awareness and train- 
ing; establishing organization policies and regulations; instituting 
cooperative security management (cooperative arrangements with 
partners, Internet service providers, and contractors); implementing 
appropriate physical security measures (such as locks and guards); 
and adopting risk mitigation measures (such as insurance and contin- 
gency planning) to ensure the continuity of operations and disaster 
recovery. In addition to these key principles for establishing cyberse- 
curity, The National Institute of Standards and Technology lists addi- 
tional guidelines for securing information technology systems.”° 


The Internet Security Alliance, a collaborative effort between the 
Electronics Industry Association and private entities like Carnegie 
Mellon University’s CERT Coordination Center, recommends a series 
of steps for protecting small businesses. These steps represent an 
easy-to-follow plan with precautions that are achievable within the 
means available to small companies.”’ 


Password Protection 


Passwords are the basic form of computer security for preventing 
unauthorized access and exploitation of information systems. 
Without limiting access, information can be read, changed, or 
destroyed by anyone who gains entry to the network. Passwords 
need to be complicated so that they cannot be easily found out. 
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Businesses should establish an electronic environment that requires 
strong passwords by mandating their length, structure, complexity, 
and how frequently they should be changed. Employees need to be 
educated on password policies. 


Software 


Using software that protects against computer viruses is a relatively 
inexpensive means to protect against computer attacks. Antivirus 
software should be installed on every machine and updated weekly. 


Security Practices 


The most common methods for transmitting computer viruses are 
though e-mail attachments (such as word files, pictures, music, and 
spreadsheets) and through files downloaded from a Web site. 
Preventative steps can be taken to avoid introducing a malicious code 
into information systems. These include not using the “preview” 
function for e-mail contents, not opening attachments identified as 
malicious, and deleting suspect e-mails, such as chain e-mails, e-mails 
from unknown individuals, or those with suspicious subjects such as 
“OPEN THIS!” 


Security Hardware 


Firewalls are computer programs that act similarly to gate guards. 
They examine communications coming into an information system 
from the Internet or other external systems, as well as information 
being sent out. Without firewalls, hackers will likely be able to gain 
access to computer systems and determine what information is avail- 
able as well as the network’s vulnerabilities. Some technical assis- 
tance is usually required to install, establish, and maintain firewalls. 


Remove Unused Software and User Accounts 


Unused software and user accounts (such as the accounts of termi- 
nated employees) can be exploited by attackers as a means to gain 
entry into computer systems. As equipment is upgraded, old or 
deleted files, programs, and user account information may remain. A 
process should be established to remove or destroy data on all com- 
puter hard drives when the equipment is used for other purposes, 
discarded, donated, or sold. 
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Physical Security 


Even with password protection, antiviral software, and firewalls, an 
attacker that gains physical access to a computer will likely be able to 
bypass security measures and exploit or sabotage an information sys- 
tem. Thus, companies need to provide physical security for electronic 
devices including desktop computers, laptops, handheld devices, and 
servers. 


Back Up Important Information 


Copying files, folders, and software onto some other media, such as a 
CD-ROM or Zip disk, will offer some protection against the loss or 
corruption of data from a cyberattack. Backup copies should be made 
on a routine schedule and stored in a secure, remote location. 


Update Software 


Software vendors routinely update their products to fix problems or 
improve their software. These efforts include applying software 
“patches” to upgrade security components within the software or 
remove vulnerabilities, such as code defects that can be exploited by 
malicious programs. It is important to know how vendors provide 
updates and establish procedures for ensuring they are applied. 


Limit Access to Sensitive and Classified Data 


Access to data stored in computer systems can be limited to specific 
users. Technical assistance may be required to establish authorized 
access controls. In addition, employees can be educated to not share 
inappropriately sensitive information (such as privacy data like social 
security numbers and financial records such as credit card numbers) 
in unsecured e-mails and databases. 


PROSPECTS FOR THE FUTURE 


Because of the rapid rate of computer technology development the 
future scope of the threat may be hard to quantify. To keep pace with 
new dangers, new defensive technologies will no doubt be needed. 
For example, more advanced systems could be required to meet the 
operational requirements of the law enforcement, military, and intel- 
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ligence communities. These needs will include solutions for retriev- 
ing, storing, and analyzing very large media storage devices, tools to 
automate the collection of data files, and means for both circumvent- 
ing and protecting encryption systems.”® 


CHAPTER SUMMARY 


Cyberthreats are real. The potential for catastrophic attacks that 
might cause billions of dollars in damage and risk millions of lives is 
debatable. There is no question, however, that terrorists are already 
using the Internet and other information technologies to serve their 
purposes. While both the public and private sectors have undertaken 
initiatives to improve cybersecurity, much remains to be done. There 
are a number of commonsense steps that can be taken to improve 
cybersecurity. 


CHAPTER QUIZ 


1. What are the various ways that terrorists might use the Internet 
and other information technologies? 


What is a cyberattack? 
What is the most likely cyberthreat? 
Why are cyberattacks difficult to defend against? 


a E 


What is the best means to deal with cyberthreats? 
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I] 


HOMELAND SECURITY ROLES, 
RESPONSIBILITIES, AND 
JURISDICTIONS 


Federal, State, and Local 
Government Responsibilities 


Americans should find comfort in knowing that millions of their fellow 
citizens are working every day to ensure our security at every level— 
federal, state, county, municipal. These are dedicated professionals 

who are good at what they do. 


Governor Tom Ridge at his swearing-in ceremony as Director, 
Office of Homeland Security, October 8, 2001 


CHAPTER OVERVIEW 


The national homeland security framework established in the wake 
of the September 11 attacks is still a work in progress. This chapter 
outlines the progress and the current organizations, programs, and 
principles governing domestic security activities in the United States 
after three years of concerted effort. Included here is a review of the 
concepts driving national initiatives, a summary of the roles and 
responsibilities assigned to various federal agencies, and a discussion 
of the role of state and local governments. This is a foundational 
chapter for the remaining topics discussed in Part 3. It lays the 
groundwork for the discussions about the government, the private 
sector, volunteer efforts, and personnel protection that are covered in 
the remaining chapters of the text. 
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PART 3 * HOMELAND SECURITY 
CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Define homeland security and the overarching principles 
guiding domestic security activities. 


2. Describe how the president oversees and influences homeland 
security. 


3. Describe the organization and mission of the Department of 
Homeland Security. 


4. Understand the roles of the Department of Defense and the 
Congress. 


5. Describe the relationship between the federal, state, and local 
governments. 


THE NEW NORMALCY 


On a crisp October morning less than a month after the 9/11 
tragedies, President Bush signed an order establishing the Office of 
Homeland Security and introduced its director, Tom Ridge. The office 
was established to provide initial coordination of federal efforts for 
improving homeland security. Ridge would bear much of the respon- 
sibility for the effort. Twice elected governor of Pennsylvania, he 
quickly became immersed in the most significant reorganization of 
the federal government since the restructuring of the Pentagon in 
1947. Within two years Ridge became the secretary of a new 
Department of Homeland Security. The creation of the department 
and other federal initiatives has significantly reshaped how the 
United States provides for domestic security. 


THE NATIONAL CONCEPT OF 
PROTECTING THE HOMELAND 


The term national security denotes the full scope of activities involved 
in protecting the country’s domestic and foreign interests. National 
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security activities range from fighting wars and conducting counter- 
terrorism operations overseas to securing U.S. borders and fighting 
terrorism within the United States. 

Protecting the homeland (U.S. states and territories) is a matter for 
two components of national security—homeland defense and homeland 
security. Homeland defense is the traditional responsibility of pro- 
tecting U.S. territory from armed invasion and external acts of aggres- 
sion.! For example, a ballistic missile fired by North Korea at the 
United States would clearly be an act of war and a threat to the 
nation. Defending against this danger would be a homeland defense 
mission, as would certain activities such as combat air patrols flown 
by the military over U.S. metropolitan areas. 

Homeland security is the second subset of national security prima- 
rily concerned with protecting U.S. territory. It is defined by the 
National Strategy for Homeland Security as “a concerted national effort 
to prevent terrorist attacks within the United States, reduce America’s 
vulnerability to terrorism, and minimize the damage and recover from 
attacks that do occur.”? In short, homeland security is focused on ter- 
rorism in the United States. These terrorist acts could include kidnap- 
pings; bombings; shootings; attacks involving chemical, biological, 
radiological, or nuclear weapons; cyberattacks; or other forms of mali- 
cious violence, whether perpetrated by U.S. citizens or foreigners. 

The definition of homeland security does not include countering 
terrorist attacks against U.S. interests overseas, such as attacks on U.S. 
military bases or embassies. Similarly, counterterrorism operations 
abroad, whether they are military, intelligence, or diplomatic meas- 
ures are generally not considered part of homeland security, though 
they may contribute to providing information or support for home- 
land security activities. Alternatively, there are some overseas activi- 
ties, such as certain law enforcement activities, visa issuance, and 
transportation security, that are considered extensions of domestic 
homeland security programs. 


ORGANIZING FOR DOMESTIC SECURITY 


The structure of American governance plays a significant role in 
determining the manner in which the United States addresses the 
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homeland defense and security missions. Under the U.S. federalist 
system, power is shared between federal and state governments. The 
division of responsibilities is largely defined by the U.S. Constitution. 
In turn, these divisions prescribe duties for protecting the homeland. 
The federal government, for example, is charged by the Constitution 
with “providing for the common defense.” Thus, homeland defense 
is principally a federal mission and the responsibility of the 
Department of Defense and the armed forces of the United States. In 
contrast, the Tenth Amendment to the Constitution reserves to the 
states and the people all power not specifically delegated to the fed- 
eral government. As a result, responsibilities for homeland security, 
which include a broad range of activities undertaken by federal and 
state governments, local municipalities, the private sector (such as 
businesses and nongovernmental organizations), and individual citi- 
zens, are far more diverse. 


FEDERAL 


The federal government is comprised of the executive branch, the 
Congress, and the judiciary. The executive branch fulfills its home- 
land security responsibilities by executing and enforcing federal laws, 
such as the Homeland Security Act of 2002. Congress’s role in home- 
land security includes not only its legislative powers, but its oversight 
responsibilities for the activities of the executive branch. The judiciary 
also has a key role in protecting the homeland. It has responsibility 
for interpreting the laws of the United States and how they are 
applied by federal, state, and local governments. 


The president’s two principal instruments for directing the policies 
governing the protection of the homeland are the National Security 
Council and the Homeland Security Council. 


The National Security Council 

The National Security Council (NSC) was established by the National 
Security Act of 1947.° Its mission is to develop national security strat- 
egy and policy. The membership of the NCS includes the president, 
vice president, the secretary of state, the secretary of the treasury, the 
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secretary of defense, and the assistant to the president for national 
security affairs. The chairman of the joint chiefs of staff is the statu- 
tory military advisor to the council, and the director of central intelli- 
gence is the intelligence advisor. The heads of other executive 
departments and agencies and other senior U.S. officials may also be 
invited to attend as needed. 

Strategy and policy are largely formulated by the president's national 
security advisor and NSC staff that vet and coordinate recommenda- 
tions with the secretaries and staffs of the departments. The formal pro- 
cedures governing the policy-making process are dictated by 
presidential decision directives. These procedures are generally consis- 
tent from one administration to the next. While the NSC sets overall 
policies, operations and activities to implement these policies are under- 
taken by the various departments and other agencies. Coordination 
between the NSC staff and the departments is made through commit- 
tees consisting of members of the departments. Depending on the sig- 
nificance of the issue and the seniority of the staff required to effect 
coordination, matters are referred to the Principals Committee, the 
Deputies Committee, or policy coordinating committees. 

The NSC’s activities cover the full scope of national security mat- 
ters, although its deliberations primarily focus on issues of foreign 
affairs. The council directly manages policies and strategies related to 
counterterrorism operations overseas, and it is the final arbitrator on 
issues related to homeland defense. This was in fact the case after the 
September 11 attacks when the NSC directed policies regarding the 
employment of combat air patrols over metropolitan areas. 


The Homeland Security Council 


Policies and strategies related to homeland security on the other hand 
are a matter for the Homeland Security Council (HSC). Initially estab- 
lished by executive order by President Bush, the HSC was later for- 
mally established by the Homeland Security Act of 2002. The statutory 
members of the HSC are the president, the vice president, the secretary 
of homeland security, the attorney general, and the secretary of 
defense. Other members attend as directed by the president. Policy 
coordination is done through a series of committees much as in the 
NSC. For example, the assistant secretary of homeland defense is the 
department’s representative to the HSC staff and normally represents 
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the Department of Defense at HSC principals and deputies committee 
meetings and provides representatives to interagency policy coordi- 
nation committee meetings. 

Like the NSC, the HSC has a senior advisor and a council staff, 
albeit on a much smaller scale. Initially, the HSC staff was divided 
into 11 policy coordinating committees. The number of divisions in 
the policy staff was later reduced to six, roughly mirroring the struc- 
ture of the critical mission areas of homeland security and the organ- 
ization of the Department of Homeland Security. The major divisions 
of the staff are domestic counterterrorism, border and transportation 
security, critical infrastructure, emergency response and recovery, 
and bioterrorism preparedness. 

Like the NSC, the HSC is also responsible for developing national 
strategies and policies. However, while the HSC structurally functions 
in a manner similar to the NSC, in practice the focus of the two staffs 
is quite different. Many of the federal government’s national security 
practices and policies are well developed, honed over nearly a half 
century of addressing foreign policy issues during the Cold War. 
Therefore, the NSC focuses more on developing policies than evaluat- 
ing how they are executed by the departments. In contrast, many 
homeland security programs are still being formulated. Therefore, 
rather than just vetting and coordinating policies and strategy, the 
HSC often becomes involved in creating and developing new initia- 
tives. Thus, its role tends to be more operational than the NSC. For 
example, the council staff took a lead role in developing Project 
BioShield, a multiyear research program to develop medical responses 
to bioterrorist threats. In addition, unlike the NSC, the HSC engages in 
extensive coordination with state and local governments and the pri- 
vate sector since they also play a significant role in homeland security. 

The president can issue directives developed by the HSC. These are 
called homeland security presidential directives (HSPD). The HSPDs 
serve to direct federal agencies to undertake policies and programs 
that support homeland security. 


Common HSCINSC Responsibilities 


While the two councils deal with different issues, in some cases their 
concerns and responsibilities overlap. Both, for example, may be 
engaged in issues with regard to foreign policy toward Canada and 
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Mexico. As a result, there is often coordination between the two staffs. 
The Homeland Security Act also authorizes the president to conduct 
joint meetings of the two councils. Eventually, as the processes and 
procedures for homeland security become well established, it may be 
possible to combine the two councils into a single staff whose tasks 
mirror the more traditional functions of the NSC. In the near term, 
however, the NSC and HSC will likely remain separate, with their 
staffs operating under different statutory authorities. 


Office of Management and Budget 


Another organization within the Executive Office of the President 
that plays a significant role in homeland security and homeland 
defense is the Office of Management and Budget (OMB). Neither the 
NSC nor the HSC have budgetary oversight concerning the programs 
and activities under their purview. The OMB reviews the budget sub- 
missions of the departments for compliance with administration poli- 
cies and directives. As a result, while the HSC is responsible for 
providing strategic direction to the Department of Homeland 
Security and other federal agencies with respect to the challenges of 
domestic security, it is the task of OMB to ensure that the appropriate 
level of resources is requested in the president’s annual budget 
request to Congress to perform the tasks called for by administration 
policies and strategy. 


FROM THE SOURCE: 


THE HOMELAND SECURITY COUNCIL 


Excerpt from Executive Order Establishing the Office of Homeland 
Security and the Homeland Security Council, October 8, 2001 


Sec. 5. Establishment of Homeland Security Council 


a) I hereby establish a Homeland Security Council (the 
“Council”), which shall be responsible for advising and 
assisting the President with respect to all aspects of 
homeland security. The Council shall serve as the mech- 
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anism for ensuring coordination of homeland security- 
related activities of executive departments and agencies 
and effective development and implementation of 
homeland security policies. 


(b) The Council shall have as its members the President, the 
Vice President, the Secretary of the Treasury, the 
Secretary of Defense, the Attorney General, the 
Secretary of Health and Human Services, the Secretary 
of Transportation, the Director of the Federal 
Emergency Management Agency, the Director of the 
Federal Bureau of Investigation, the Director of Central 
Intelligence, the Assistant to the President for 
Homeland Security, and such other officers of the exec- 
utive branch as the President may from time to time 
designate. The Chief of Staff, the Chief of Staff to the 
Vice President, the Assistant to the President for 
National Security Affairs, the Counsel to the President, 
and the Director of the Office of Management and 
Budget also are invited to attend any Council meeting. 
The Secretary of State, the Secretary of Agriculture, the 
Secretary of the Interior, the Secretary of Energy, the 
Secretary of Labor, the Secretary of Commerce, the 
Secretary of Veterans Affairs, the Administrator of the 
Environmental Protection Agency, the Assistant to the 
President for Economic Policy, and the Assistant to the 
President for Domestic Policy shall be invited to attend 
meetings pertaining to their responsibilities. The heads 
of other executive departments and agencies and other 
senior officials shall be invited to attend Council meet- 
ings when appropriate. 


(c) The Council shall meet at the President’s direction. 
When the President is absent from a meeting of the 
Council, at the President’s direction the Vice President 
may preside. The Assistant to the President for 
Homeland Security shall be responsible, at the 


Sauter chl1-14 3/21/05 


12:52 PM Page 217 $ 


CHAPTER 11 * HOMELAND SECURITY ROLES, RESPONSIBILITIES, AND JURISDICTIONS 217 


The Department 
of Homeland 
Security 


President’s direction, for determining the agenda, ensur- 
ing that necessary papers are prepared, and recording 
Council actions and Presidential decisions. 


Subsequently, the Homeland Security Act of 2002 established 
a National Homeland Security Council by law. The statutory mem- 
bers are the president, vice-president, secretary of homeland 
security, secretary of defense, the attorney general, and others as 
designated by the President. 


A common misconception held by many Americans is that the 
Department of Homeland Security (DHS) is responsible for all home- 
land security activities. This is far from accurate. Even at the federal 
level virtually every federal agency has some responsibilities. In addi- 
tion, the DHS has many non-homeland security responsibilities from 
collecting tariffs and duties to providing immigration services and 
protecting U.S. fisheries. In fact, more than one-third of the depart- 
ment’s budget is for its service missions and regulatory functions. 
The DHS, however, does have the lion’s share of federal responsibili- 
ties for protecting the homeland, accounting for over 60 percent of the 
annual federal spending on domestic security. 

The department has four major directorates: Border and 
Transportation Security; Emergency Preparedness and Response; 
Science and Technology; and Information Analysis and Infrastructure 
Protection. 


Border and Transportation Security 


The Border and Transportation Security (BTS) Directorate is responsi- 
ble for maintaining the security of the nation’s borders and trans- 
portation systems. Its principal homeland security mission is to prevent 
the entry of terrorists or terrorist assets (such as smuggled weapons 
or illicit financial instruments) while ensuring the efficient flow of 
lawful traffic and commerce. Within the directorate, the Transportation 
Security Administration (TSA) has statutory responsibility for secu- 
rity of airports and commercial aviation and the authority to establish 
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regulatory security requirements on other modes of public transporta- 
tion. Other homeland security activities are conducted by the Bureau 
of Customs and Border Protection (CBP), which oversees security at 
U.S. land borders and ports of entry, and the Bureau of Immigration 
and Customs Enforcement (ICE), which provides interior immigra- 
tion and customs law enforcement. 

In addition to its other responsibilities, the BTS is responsible for 
providing oversight of the visa issuance and monitoring process. All 
foreign visitors, with the exception of citizens participating in the 
Visa Waiver Program, must obtain a visa before entering the United 
States. The Homeland Security Act of 2002 assigned the DHS 
responsibility for establishing visa policies, setting training require- 
ments, and effecting coordination for the implementation of secu- 
rity measures.* 


Emergency Preparedness and Response 


The Emergency Preparedness and Response (EPR) Directorate over- 
sees federal preparedness, response, and mitigation efforts for both 
natural and technological disasters, including terrorist acts. The EPR 
is responsible for coordinating the National Response Plan (NRP). 
The NRP is in reality a family of plans that direct how the federal 
government will respond to all kinds of disasters. The EPR would 
also coordinate all federal support to state and local governments in 
the event federal resources are required. The directorate also focuses 
on risk mitigation in advance of emergencies by promoting the con- 
cept of disaster-resistant communities, including providing federal 
support for local governments that promote structures and commu- 
nities that reduce the chances of being hit by disasters. It coordinates 
with private industry, the insurance sector, mortgage lenders, the real 
estate industry, homebuilding associations, citizens, and others to cre- 
ate model communities in high-risk areas. 

The principal component of the ERP is the Federal Emergency 
Management Agency (FEMA). FEMA’s authorities are derived from 
the Robert T. Stafford Disaster Relief and Assistance Act of 1984, 
which authorizes the president to supplement the resources of over- 
whelmed states and localities. The president can declare a major dis- 
aster upon the request of the governor of the affected state.° 
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Science and Technology 


The Science and Technology (S&T) Directorate is the primary research 
and development arm of the Department of Homeland Security. It 
conducts research on homeland security technologies both for the 
department and to support the technology needs of state and local 
governments. The vast majority of research performed by the direc- 
torate is “extramural,” performed under contract by existing academic 
and commercial research facilities. For example, in 2004 the directorate 
let a contract to establish a Homeland Security Research Institute. The 
S&T Directorate is authorized by Congress to maintain the institute for 
three years as a federally funded research development center. 

Most of the S&T Directorate’s research is managed by the 
Homeland Security Advanced Research Projects Agency (HSARPA). 
Another common misperception is that HSARPA, like the Department 
of Defense’s Defense Advanced Research Projects Agency (DARPA) 
engages in high-risk ventures that might produce extraordinary bene- 
fits, much like the research that resulted in the creation of the Internet. 
The HSARPA’s research agenda is quite different. The primary focus 
is on near-term capabilities, off-the-shelf technologies that can be 
ready for use in six months to two years. A large part of the research 
program involves “systems engineering,” ensuring that technologies 
are adopted to meet the specific needs of the intended users. 


Information Analysis and Infrastructure Protection 


The Information Analysis and Infrastructure Protection (IAIP) 
Directorate provides the DHS with the capability to assess a broad 
range of intelligence information concerning threats to the homeland 
and to issue timely warnings. The IAIP has three primary compo- 
nents: the Office of Information Analysis (IA), the Office of 
Infrastructure Protection (IP), and the Homeland Security Operations 
Center (HSOC). This directorate is not an intelligence collecting activ- 
ity. [AIP does not have field agents, satellites, or other intelligence col- 
lection assets. Rather, IAIP analyzes information collected by other 
agencies to develop sector-specific warnings for various components 
of the department, the private sector, or state and local municipalities. 
Conducting this analysis and disseminating appropriate warnings are 
tasks primarily performed by the directorate’s IA and IP offices. 


—P— 


Sauter chl1-14 3/21/05 12:52 PM Page 220 5 


220 PART 3 * HOMELAND SECURITY 


The HSOC monitors conditions throughout the United States and 
administers and makes recommendations on establishing alert levels 
for the Homeland Security Advisory System (HSAS), an important 
component of the intelligence and early warning mission area. The 
HSAS employs a series of color codes to designate various levels of 
national preparedness in anticipation of a terrorist attack. Associated 
with each threat condition are a range of suggested protective meas- 
ures (such as implementing various contingency plans), with federal, 
state, and local agencies responsible for developing and implement- 
ing their own specific response activities.® 


ISSUES: 
WARNING THE NATION 


Homeland Security Presidential Directive 3 (HSPD-3), published in 
March 2002, established the color-coded Homeland Security 
Advisory System. Since its inception, the system has been contro- 
versial. Local and state governments have complained about the 
cost of implementing additional security and that alerts are insuffi- 
ciently specific. The citizenry is equally perplexed. On the other 
hand, the system has provided clearer guidance for organizing fed- 
eral activities. 


Excerpt from the Homeland Security Presidential Directive 3 (HSPD-3) 


Guidance for Federal Departments and Agencies 


The following Threat Conditions each represent an increas- 
ing risk of terrorist attacks. Beneath each Threat Condition 
are some suggested Protective Measures, recognizing that 
the heads of Federal departments and agencies are respon- 
sible for developing and implementing appropriate 
agency-specific Protective Measures: 


Low Condition (Green). This condition is declared when 
there is a low risk of terrorist attacks. Federal departments 
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and agencies should consider the following general meas- 
ures in addition to the agency-specific Protective Measures 
they develop and implement: 


Refining and exercising as appropriate preplanned 
Protective Measures; 

Ensuring personnel receive proper training on the 
Homeland Security Advisory System and specific pre- 
planned department or agency Protective Measures; and 

Institutionalizing a process to assure that all facilities and 
regulated sectors are regularly assessed for vulnerabil- 
ities to terrorist attacks, and all reasonable measures 
are taken to mitigate these vulnerabilities. 


Guarded Condition (Blue). This condition is declared when 
there is a general risk of terrorist attacks. In addition to the 
Protective Measures taken in the previous Threat Condition, 
Federal departments and agencies should consider the fol- 
lowing general measures in addition to the agency-specific 
Protective Measures that they will develop and implement: 


Checking communications with designated emergency 
response or command locations; 

Reviewing and updating emergency response proce- 
dures; and 

Providing the public with any information that would 
strengthen its ability to act appropriately. 


Elevated Condition (Yellow). An Elevated Condition is 
declared when there is a significant risk of terrorist attacks. In 
addition to the Protective Measures taken in the previous 
Threat Conditions, Federal departments and agencies should 
consider the following general measures in addition to the 
Protective Measures that they will develop and implement: 


Increasing surveillance of critical locations; 
Coordinating emergency plans as appropriate with 
nearby jurisdictions; 
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Assessing whether the precise characteristics of the threat 
require the further refinement of preplanned Protective 
Measures; and 

Implementing, as appropriate, contingency and emer- 
gency response plans. 


High Condition (Orange). A High Condition is declared 
when there is a high risk of terrorist attacks. In addition to 
the Protective Measures taken in the previous Threat 
Conditions, Federal departments and agencies should con- 
sider the following general measures in addition to the 
agency-specific Protective Measures that they will develop 
and implement: 


Coordinating necessary security efforts with Federal, 
State, and local law enforcement agencies or any 
National Guard or other appropriate armed forces 
organizations; 

Taking additional precautions at public events and possi- 
bly considering alternative venues or even cancella- 
tion; 

Preparing to execute contingency procedures, such as 
moving to an alternate site or dispersing their work- 
force; and 

Restricting threatened facility access to essential person- 
nel only. 


Severe Condition (Red). A Severe Condition reflects a severe 
risk of terrorist attacks. Under most circumstances, the 
Protective Measures for a Severe Condition are not intended 
to be sustained for substantial periods of time. In addition to 
the Protective Measures in the previous Threat Conditions, 
Federal departments and agencies also should consider the 
following general measures in addition to the agency-specific 
Protective Measures that they will develop and implement: 


Increasing or redirecting personnel to address critical 
emergency needs; 
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Assigning emergency response personnel and pre-posi- 
tioning and mobilizing specially trained teams or 
resources; 

Monitoring, redirecting, or constraining transportation 
systems; and 

Closing public and government facilities. 


1. Should the United States have a national alert system? Why? 
What are the likely benefits and limitations of having a 
national alert system? 

2. How do you think the HSAS could be improved? 


3. Who should pay for increased security as a result of changing 
alert levels? Why? 


In addition, to its monitoring activities, the HSOC also serves as a 
national emergency operations center for coordinating the federal 
response to homeland security emergencies. The HSOC also main- 
tains the Homeland Security Information Network (HSIN). The HSIN 
will provide a collaborative tool for sharing information with states, 
territories, and major urban areas through the Joint Regional 
Information Exchange System (JRIES). Initially, the system will be 
limited to sensitive, but unclassified, information, but in the future it 
is intended to carry secret information to the state level. Finally, [AIP 
has responsibility for coordination of planning and provision of 
National Security and Emergency Preparedness (NS/EP) communi- 
cations for the federal government. 


Coast Guard and Secret Service 


In addition to the department’s major directorates, the U.S. Coast 
Guard and Secret Service are independent agencies within the DHS 
that have significant homeland security responsibility. The Coast 
Guard serves as the lead national agency for maritime security. 
Homeland security roles include protecting the flow of commerce 
and the marine transportation system from terrorism; maintaining 
maritime border security against illicit drugs, illegal aliens, firearms, 
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and weapons of mass destruction; preventing and responding to haz- 
ardous material spills; and coordinating efforts and intelligence with 
federal, state, and local agencies. Many of its homeland security 
duties are conducted in conjunction with its other missions. For 
example, by law the Coast Guard provides captains of the port 
(COTP) who have responsibility for enforcing regulations for the pro- 
tection and security of vessels, harbors, and waterfront facilities; 
anchorages; bridges; safety and security zones; and ports and water- 
ways under their jurisdiction. As part of their responsibilities they 
review and approve the port security plans and chair local port secu- 
rity committees. 

The Coast Guard enjoys a unique legal status that makes the 
service an effective homeland security instrument. The Coast Guard 
is considered one of the uniformed military services and routinely 
works with the other armed forces, though it is not part of the 
Department of Defense and not subject to the limitations of Posse 
Comitatus. The Coast Guard also has status as a law enforcement, 
intelligence, and regulatory agency. The service, for example, has the 
authority to inspect shipping containers for safety and hazardous 
materials, authorities that it can use to ensure that containerized ship- 
ping is not used as a terrorist weapon. 

The Secret Service provides protection to the president and other 
senior personnel in the U.S government. In addition, the Secret 
Service is responsible for coordinating security for specially desig- 
nated national security events such as the Super Bowl and presiden- 
tial nominating conventions. Finally, from the time when the Secret 
Service served as part of the U.S. Treasury Department, the Secret 
Service retains responsibilities for investigating certain financial 
crimes. 

In addition to the major organizations within the department, sev- 
eral offices within the secretariat of the DHS have significant respon- 
sibilities. The Office of State and Local Government Coordination and 
Preparedness is responsible for coordinating DHS activities with state 
and local governments, managing homeland security grants, and 
coordinating a range of education and training activities. Other 
offices of note include the department's Office of International Affairs, 
which assists in coordinating activities and programs with foreign 
countries, and the Office of the Chief Information Officer, which is 
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responsible for developing and integrating the department’s many 
information technology programs. 


Intelligence support for all matters of national security, including 
homeland security and homeland defense, is provided by the U.S. 
Intelligence Community. The Central Intelligence Agency (CIA) and 
14 other agencies, including the DHS and the Coast Guard, comprise 
the national Intelligence Community.’ Before the passage of the 
Intelligence Reform and Terrorism Prevention Act of 2004, the director 
of Central Intelligence (DCI), who also served as the director of the 
CIA, was responsible by law for coordinating the activities of the com- 
munity including establishing priorities for intelligence collection 
and to some degree analysis of critical issues. In practice, the DCI had 
little authority over members of the community, particularly the sub- 
stantial intelligence resources in the Department of Defense. The 
DCI, for example, did not have oversight of the budgets of intelli- 
gence agencies outside the CIA. Much of the coordination was per- 
formed through interagency activities such as the DCI Nonproliferation 
Center and the National Intelligence Council.’ The Intelligence Reform 
and Terrorism Prevention Act of 2004 created a director of National 
Intelligence (DNI) to replace the DCI. The DNI will serve as the head 
of the Intelligence Community, but not the CIA director. In addition, 
the DNI will have broad oversight responsibilities to manage national 
intelligence operations, particularly with regard to setting budget and 
intelligence collection priorities. The DNI will also be the president’s 
principal intelligence advisor. 


Terrorist Threat Information and Screening Centers 


To enhance intelligence support for homeland security in 2003 
President Bush created two information fusion centers, the Terrorist 
Threat Information Center (TTIC) and the Terrorist Screening Center 
(TSC). The TTIC is designed to be a central location where all terror- 
ist-related intelligence, both foreign and domestic, is gathered, coor- 
dinated, and assessed. It is composed of elements of the FBI, CIA, 
Department of Defense, Department of Homeland Security, 
Department of State, and other intelligence agencies. The TTIC mis- 
sion is to optimize the use of terrorist threat-related information, 
expertise, and capabilities to conduct threat analysis and inform col- 
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lection strategies; ensure information sharing across agency lines; 
integrate terrorist-related information collected domestically and 
abroad in order to form the most comprehensive threat picture possi- 
ble. The TTIC is also responsible for developing terrorist threat 
assessments for the national leadership and provides the president’s 
daily terrorist threat report. 

While the TTIC is primarily responsible for threat assessments with 
regard to domestic terrorist threats, it coordinates its activities with intel- 
ligence integration activities. The TTIC is collocated with the DCI and 
FBI counterterrorism centers and the FBI’s National Joint Terrorism 
Task Force, and it works closely with the DHS IAIP. In 2004, the pres- 
ident ordered that the TTIC be integrated into a new organization, the 
National Counterterrorism Center (NCTC), which would have responsi- 
bility for coordinating counterterrorism operations federal-wide. 

The TTIC also maintains a secure Web site to provide access to top- 
secret information to government officials from all agencies involved 
in the war against terrorism. Plans are that eventually TTIC online 
will give access to a much broader community of analysts, including 
allowing more information sharing with state and local officials and 
the private sector. Currently, the director of the TTIC reports directly 
to the DCI.’ 

A second presidential initiative was the creation of the TSC under 
the FBI to consolidate all terrorist watch lists into a single function 
and give around-the-clock access to local, state, and federal authori- 
ties. The TSC will bring together databases that include the State 
Department’s TIPOFF,!° the FBI’s Violent Gang and Terrorist 
Offender’s File, and the DHS’s many transportation security lists. The 
TSC will make it easier for consular officers to determine whether a 
visa applicant is a potential terrorist. The main source of the TSC’s 
information will be the TTIC. 

The Intelligence Reform and Terrorism Prevention Act of 2004 
created a NCTC under the DNI. The law also made the TTIC part of 
the NCTC. 


The Federal Bureau of Investigation 


Primary domestic intelligence support for counterterrorism is pro- 
vided by the Federal Bureau of Investigation, a component of the 
Department of Justice.’ As part of an announced restructuring of the 
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The USA 
PATRIOT Act 


FBI on May 29, 2002, the FBI director declared that combating terror- 
ism would become the Bureau’s primary mission.” 

Several components of the FBI are primarily organized to respond 
to the threat of terrorism. The FBI has established a network of 84 
Joint Terrorism Task Forces (JTTFs) to put federal, state, and local law 
enforcement together to investigate threats and share information. 
The National Joint Terrorism Task Force (NJTTF) in Washington, DC, 
includes representatives from 30 agencies, spanning the fields of 
intelligence, public safety, and federal, state, and local law enforce- 
ment. The NJTTF collects terrorism information and funnels it to the 
regional JTTFs, other terrorism units within the FBI, and intelligence 
and law enforcement agencies. The Foreign Terrorist Tracking Task 
Force (FTTTF) works to prevent terrorists from entering the country 
and tracks down suspects within the United States. 

The Bureau’s Counterterrorism Watch (CT Watch) is the FBI’s cen- 
ter for terrorism prevention operations. Incoming threats are given an 
initial review by CT Watch staff; those deemed credible are passed on 
to FBI investigators for urgent action. CT Watch also produces daily 
terrorism threat briefing materials and intelligence reports for 
national security policy makers and members of the intelligence and 
law enforcement communities. 


The USA PATRIOT Act, a law passed with overwhelming support in 
Congress immediately following the September 11 terrorist attacks, 
plays an important role in facilitating law enforcement and intelli- 
gence activities in support of domestic counterterrorism operations. 1’ 
Several provisions of the act are key for promoting appropriate shar- 
ing of information between intelligence and law enforcement investi- 
gators and providing counterterrorism investigators tools that law 
enforcement agents already had available to investigate other serious 
crimes. 

Prior to passage of the PATRIOT Act, law enforcement officials 
were generally restricted from sharing information provided to a 
grand jury with members of the intelligence community. The act per- 
mitted the sharing of matters involving foreign intelligence uncov- 
ered during a grand jury with counterterrorism law enforcement 
investigators. Another section of the PATRIOT Act amends the 
National Security Act to permit the Justice Department to disclose to 
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the CIA foreign intelligence acquired in the course of a criminal inves- 
tigation. The PATRIOT Act also modified the Foreign Intelligence 
Surveillance Act of 1978, which established special groups of judges to 
supervise law enforcement investigations involving classified sub- 
jects and material.'* While the passage of the PATRIOT Act has 
engendered much controversy and concern over potential abuses of 
civil liberties, virtually all the investigatory tools provided by the act 
have already been used for many years to prosecute other criminal 
acts and have been upheld as legitimate by the courts. In addition, 
there are no recorded abuses of the powers granted under this act. 


The Pentagon conducts homeland defense and can also provide assis- 
tance for homeland security in support of other federal civilian agen- 
cies. The assistant secretary for homeland defense is responsible for 
policy matters and providing oversight of military support to civil 
authorities. 


Assistant Secretary of Homeland Defense 


The assistant secretary of homeland defense’s primary responsibili- 
ties focus on setting department polices regarding homeland secu- 
rity-related issues. The secretary also oversees coordination of 
research and development activities with the S&T Directorate of the 
DHS. Much of the DOD’s support for developing homeland security 
technologies is done through the Technical Support Working Group 
(TSWG), an interagency activity that works to adopt existing tech- 
nologies to meet new mission requirements. 

Another mission managed by the assistant secretary is the DOD’s 
critical infrastructure protection program, which includes the security 
of military installations and facilities. These activities are managed by 
the newly established Defense Program Office for Mission Assurance. 
Most of the DOD’s budget for homeland security activities supports 
critical infrastructure protection programs. 

Within the military services, each has adopted a different method 
for organizing and addressing domestic security issues. The Joint 
Staff established a Homeland Security Directorate within its Strategy 
and Policy Directorate (J5). The Air Force formed a Homeland 
Security Directorate under the Deputy Chief of Staff for Air and Space 
Operations, but also maintains a separate Air Staff section for civil 
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support. The Army created a homeland security integrated concept 
team, led not by the Army staff but by a director of homeland secu- 
rity at the Army Training and Doctrine Command at Fort Monroe, 
Virginia. In addition, the Army has a Consequence Management 
Integration Office serving under its director of military support on 
the Army staff. The Marine Corps also created an integrated concept 
team and established a homeland security section at its Warfighting 
Lab at Quantico, Virginia. It is not clear that the Navy has created any 
unique command structure to deal with domestic security issues. 


U.S. Northern Command 


The military defense of most of the United States is the responsibility 
of the U.S. Northern Command (NORTHCOM) headquartered in 
Colorado Springs, Colorado. NORTHCOM’s area of responsibility 
includes the continental United States, Alaska, Canada, Mexico, and 
the surrounding water out to approximately 500 nautical miles. The 
defense of Hawaii and U.S. territories and possessions in the Pacific 
remains the responsibility of U.S. Pacific Command. The commander 
of NORTHCOM is also the commander of the binational U.S.-Canada 
North American Aerospace Defense Command (NORAD). 

Military support to civil authorities is governed by a number of fed- 
eral statutes. The Insurrection Act allows the president to dispatch 
forces at the request of a governor or state legislature to suppress insur- 
rections or allows the president to use troops to enforce federal law in 
the event of a rebellion.!6 Other laws permit using military forces in 
emergency situations dealing with nuclear material or weapons of 
mass destruction.” Finally, DOD can provide support to civilian agen- 
cies according to the provisions of the Stafford Act. The Pentagon is 
limited, however, by the Posse Comitatus law, which prohibits federal 
forces from performing law enforcement activities without the permis- 
sion of Congress. The act, however, does not preclude the military from 
providing logistical support, loaning equipment, and offering technical 
advice, facilities, and training to civil authorities.'® 

In addition, Army and Air National Guard forces can also be used 
to provide military support to civil authorities. The National Guard 
of each state or territory is commanded by its governor. Governors 
can assign state missions as allowed by state constitutions and 
statutes. Individuals or units are called into federal service under 
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either Title 32 or Title 10 of the U.S. Code. Title 32 covers federally 
funded, nonfederal duty status, which includes periodic training and 
participation in congressionally directed domestic programs such as 
drug interdiction. Under Title 10, Guard forces perform federal duties 
under the command of the president and are only then subject to the 
limitations of Posse Comitatus. 


Virtually every federal agency and department has some homeland 
security responsibilities. For example, FEMA has established a list of 
emergency support functions (ESFs). ESFs are functional areas of 
response activity established to facilitate the delivery of federal assis- 
tance required during the immediate response phase of a disaster to 
save lives, protect property and public health, and to maintain public 
safety. ESFs represent those types of federal assistance that states 
may need because of the specialized or unique nature of the assistance 
required or to supplement their available resources and response capa- 
bilities. ESFs are provided by a number of federal agencies. Additionally, 
many departments have unique response teams or participate in task 
forces that deal with terrorist threats or respond to disasters. 

In addition to supporting emergency response activities, several 
departments have significant homeland security responsibilities. The 
Department of Health and Human Services is charged with oversee- 
ing bioterrorism preparedness programs including management of 
the National Strategic Stockpile, reserves of medicines and medical 
supplies that can be deployed for a range of emergencies. The 
Department of Energy manages the security of U.S. nuclear produc- 
tion facilities, laboratories, and information. The Department of 
Agriculture oversees initiatives for dealing with bioterrorism attacks 
on the U.S. food supply. 


THE ROLE OF THE CONGRESS 


In the wake of the September 11 attacks, Congress has only partially 
reorganized its homeland security responsibilities. Both the Senate and 
the House have established subcommittees within their appropriations 
committees who draft the DHS annual budget legislation. On the other 
hand, oversight of homeland security activities is still fragmented. 
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Organization of 
State Operations 


Congress’s responsibilities related to homeland security and terrorism 
transcend all aspects of its traditional committee authority. The White 
House has identified 88 committees and subcommittees that currently 
exercise authority over homeland security policy. In the House, for 
example, at least 14 full committees and 25 separate subcommittees 
claim jurisdiction over some aspect of homeland security.” 

The House has established a Homeland Security Committee to 
oversee operations of the DHS, but the committee does not have full 
jurisdiction. In the Senate, the Homeland Security Government Affairs 
Committee has some responsibility for overseeing matters related to 
the DHS. 

There are persistent calls to reform the current committee system, but 
there is little agreement among Congressional leaders on how to best 
divide jurisdiction among various committees. Neither chamber gives 
committees full jurisdiction over all homeland security activities in the 
DHS. 


STATE AND LOCAL GOVERNMENTS 


The Tenth Amendment to the Constitution makes clear that each state 
retains substantial independent power with respect to the general 
welfare of its populace. States, territories, and U.S. tribal lands bear 
much of the responsibility for providing homeland security for their 
citizens. 


States direct some resources that are important for homeland security 
missions, including domestic counterterrorism operations, critical 
infrastructure protection, and disaster preparedness and response, 
such as statewide law enforcement agencies, public health officials, 
and state highway authorities. Since states have different geographic 
and demographic situations and varying resources, industries, and 
critical infrastructure, they face unique threats and vulnerabilities 
and capacities to respond. 

The structure of each state’s homeland security apparatus is also 
unique. According to the National Governors Association, after 9/11 
all states created homeland security entities to prepare for a wide 
range of terrorist attacks. They accomplished this by facilitating the 
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interaction and coordination needed among the governor’s office, the 
homeland security director, the state emergency management office, 
other state agencies, local governments, the private sector, volunteer 
organizations, and the federal government. These were built on exist- 
ing statewide response programs and resources. 

There is no common model; however, in several states, the home- 
land security director serves as an advisor to the governor in addition 
to coordinating state emergency management, law enforcement, 
health, and related public safety functions. In some states, the home- 
land security advisor is also the state adjutant general, the com- 
mander of state National Guard troops. Rather than assigning the 
homeland security advisors oversight of state agencies, most gover- 
nors have formed homeland security task forces, typically consisting 
of heads from law enforcement, fire and rescue, public health, 
National Guard, transportation, public works, and information tech- 
nology agencies.”° 


Metropolitan cities, towns, villages, counties, and tribal council gov- 
ernments have significant homeland security responsibilities. In 
many cases, for example, mayors and county executives are owners 
or operators of public transportation systems and transport nodes 
(such as ports, subways, or airports) or participate in their manage- 
ment. The bulk of emergency response assets, including police, fire- 
fighter, public works, and emergency medical personnel are 
employees of state and local governments. In virtually every case, 
local government leaders will play a principal role in coordinating 
local security and directing on-scene emergency response. 

Local governments represent a wide range of capacity to undertake 
homeland security measures and respond to disasters. Most commu- 
nities employ an emergency manager and emergency operations 
center, which provide the instrument for a unified response of local 
assets. In addition, many communities maintain mutual support and 
cooperative agreements to share resources with nearby localities. 


Emergency Responders 


In the event of a terrorist incident, initial efforts to secure, protect, and 
assist at the scene are provided by emergency responders. The 
Homeland Security Act of 2002 defines emergency response 
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providers as including “federal, state, and local public safety, law 
enforcement, emergency response, emergency medical (including 
hospital emergency facilities), and related personnel, agencies, and 
authorities.”?! These responders might include hazardous materials 
response teams, urban search and rescue assets, community emer- 
gency response teams, antiterrorism units, special weapons and tac- 
tics teams, bomb squads, emergency management officials, municipal 
agencies, and private organizations responsible for transportation, 
communications, medical services, public health, disaster assistance, 
public works, and construction. 


CHAPTER SUMMARY 


Homeland security is a national enterprise that requires the involve- 
ment of federal, state, and local governments as well as the private 
sector. Even within the federal government, each branch—the execu- 
tive, legislative, and judicial—has an important role to play. 
Additionally, federal homeland security activities are not confined to 
the United States. Virtually every security activity has some interna- 
tional dimension that requires cooperation with other governments 
and international nongovernmental institutions. 

The vital role of state and local governments cannot be overstated. 
State and local leaders play a critical role in all homeland security 
activities from finding and stopping terrorists to protecting critical 
infrastructure and responding to attacks. In particular, response activ- 
ities will normally always be spearheaded by local officials, with state 
and federal assets providing support and reinforcement. 

The complex nature of governance in the United States is a virtue, 
not a limitation. America is a large and diverse nation. Trying to run 
homeland security activities effectively out of an office in 
Washington, DC, would inevitably fail. The great strength of the 
decentralized nature of American governance is that it allows for 
innovation and flexibility and allows local leaders to lead, permitting 
them to adapt responses to local needs and conditions. This virtue, 
however, requires effective coordination between levels of govern- 
ment and the private sector to exploit the advantages of the American 
way of homeland security. 
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1. What is federalism, and how does it affect the conduct of home- 
land security? 


2. How should the specific roles and responsibilities of federal, 
state, and local authorities be determined? Who should decide? 


3. What is the difference between the National Security Council 
and Homeland Security Council? Should their functions be sepa- 
rate? 


4. How does Congress influence the conduct of homeland security? 


5. What is the appropriate role of the Department of Defense in 
homeland security? 
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12 


AMERICA’S NATIONAL STRATEGIES 


The Plans Driving the War on Global 
Terrorism and What They Mean 


War has been waged against us by stealth and deceit and murder. This 
nation is peaceful, but fierce when stirred to anger. The conflict was begun 
on the timing and terms of others. It will end in a way, and at an hour, 

of our choosing. 


President George W. Bush, quoted in the National Security 
Strategy of the United States, September 2002 


CHAPTER OVERVIEW 


The United States has long relied on national strategies to focus fed- 
eral efforts on dealing with national security issues from fighting 
World War II to the war on drugs. After 9/11, one of the first efforts 
of the Bush administration was to craft a family of strategies to guide 
the global war on terrorism. The National Strategy for Homeland 
Security was perhaps the most important of these documents, pro- 
viding a framework for how the federal government would organize 
domestic security activities. 

This chapter outlines the key points from each of the national 
strategies related to defeating terrorism and protecting the homeland. 
It builds on the information in the previous chapter, describing how 
the instruments of the federal government will be used to meet the 
threat of transnational terrorism, as well as the roles and responsibil- 
ities of state, local, and tribal governments and the private sector. 
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CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Define the critical mission areas in the National Strategy for 
Homeland Security. 


2. Understand the role of the Department of Defense in home- 
land security. 


3. Describe the roles the national strategies assign to state and 
local governments. 


4. Describe the roles of the private sector in the national strate- 
gies. 

5. Describe how the national strategies envision winning the war 
on terrorism. 


WHAT IS A STRATEGY? 


Strategy is the ends, ways, and means of achieving national objectives. 
The ends define the goals of the strategy. Ways comprise the methods 
that are employed to achieve the ends. Means describe the resources 
that are available to accomplish the goals. National strategies involve 
more than just the use of the armed forces. They consider all the eco- 
nomic, political, diplomatic, military, and informational instruments 
that might be used to promote a nation’s interest or secure a state 
from its enemies. 


Strategies are intended to serve as guidance for the implementation 
of plans, programs, campaigns, and other activities. In practice, they 
may serve other purposes as well. Strategies released to the public 
may also serve political purposes designed to appeal to certain con- 
stituencies, influence public opinion, or intimidate an enemy. 

The most influential strategies are those that make hard choices— 
allocating scarce resources, setting clear goals, or establishing priori- 
ties. U.S. strategy during World War II, which declared the allies 
would “defeat Germany first,” offers a case in point. That simple 
declarative sentence drove a cascading series of decisions and actions 
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Crafting 
American 
Strategy 


Strategy and 
Homeland 
Security 


that defined the conduct of the war. Likewise, the simple declaration 
of a U.S. policy of “containment” defined American policies toward 
the Soviet Union throughout the Cold War. Thus, there is no single 
definition of what makes a great strategy other than its ability to 
mobilize the country in pursuit of a national aim. 


Some national strategies are required by law. Others are prepared at 
the direction of the president. Strategies can be drafted and coordi- 
nated by the National or Homeland Security Council or a lead federal 
agency, like the Defense or State Department, may be directed to pre- 
pare the document. Strategies remain in effect until they are revised 
or superseded by presidential direction. 

National strategies are public documents, designed not only to 
guide government efforts but also to explain U.S. efforts to American 
citizens, friendly and allied nations, and potential enemies as well. 
Thus, while strategies might not detail everything being done (par- 
ticularly classified actions such as spying and secret operations), they 
do outline current aspirations for future efforts. 


National strategies are particularly important to the task of homeland 
security. While the task of defending the homeland is not new, merg- 
ing the many activities that go into that task into a holistic mission is 
revolutionary. Likewise, determining how to set priorities, organize 
activities, and measure successes is an unprecedented challenge. 
Obtaining national unity requires the guiding vision of national 
strategies. Homeland security activities are guided by a number of 
overarching strategies. In the wake of the September 11 attacks eight 
new strategies were published, five of which were specifically devel- 
oped to deal with the challenges of combating terrorism while the 
others were revisions of earlier strategies to account for the dangers 
of the post-9/11 world. 

The national strategies comprise both offensive and defensive 
measures, though virtually all the national strategies provide guid- 
ance regarding both foreign and domestic affairs. Strategies for 
national security, combating terrorism, weapons of mass destruction, 
and the military are primarily focused on defeating terrorists over- 
seas. The national homeland security strategy and strategies for criti- 
cal infrastructure protection and cybersecurity principally focus on 
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protecting the homeland. Strategies relating to drug control policy and 
money laundering focus on transnational criminal activities in which 
terrorists might also engage. These strategies contain components 
related to both domestic and overseas activities. 


NATIONAL SECURITY STRATEGY 


The National Security Strategy provides a broad framework for how all 
the instruments of national power will be employed including military 
power, intelligence, diplomacy, and law enforcement. It is required by 
law. President Reagan issued the first public national strategy in 1988. 
President Bush issued the first version of his strategy in September 
2002, which included a specific section related to global terrorism.! 
Prior to 9/11, combating transnational terrorism was primarily 
considered a law enforcement activity. The new strategy, which is 
Bush’s National Security Strategy, shifts the priority from arrest and 
prosecution to preventing attacks and killing or capturing terrorists. 


Bush’s National Security Strategy was built on the assumption that the 
best defense is a good offense. The first priority of the strategy with 
regard to terrorism is disrupting and destroying terrorist organiza- 
tions with global reach. Specific targets include leadership, their 
means of communicating, and controlling terrorist cells, financing, 
and material support. 

The strategy assumes that a combination of ways will be required 
to achieve the goal of breaking up the capacity of transnational ter- 
rorist networks to reach across nations; preventing state sponsors of 
terrorism from gaining or using weapons of mass destruction; and 
destroying threats before they reach U.S. borders. Methods include 
invoking the nation’s inherent right of self-defense to take direct 
action with conventional military forces as well as other means. In 
addition, the strategy calls for convincing or forcing states to deny 
sponsorship, support, and sanctuary for terrorists. In conducting 
these operations, the United States may act alone or in concert with 
other friendly nations and allies, though the strategy emphasizes that 
where possible America should work with other nations and existing 
alliances. This declaration is often referred to as the Bush Doctrine. 
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War of Ideas 


The Role of 
Defense 


Another component for Bush’s national strategy calls for waging a 
“war of ideas.” The goal of this campaign is to make clear that acts of 
terrorism are illegitimate and diminish the underlying conditions that 
support terrorism by promoting democratic values and economic 
freedom. 


The final component of the president’s national strategy with regard 
to terrorism emphasizes the specific role of homeland security, recog- 
nizing that a good offense is not sufficient for deterring, preventing, 
or mitigating every terrorist act. The National Security Strategy 
emphasizes improving the coordination and integration of domestic 
capabilities for combating terrorism. 


NATIONAL STRATEGY FOR COMBATING TERRORISM 


In February 2003 the United States promulgated its first public over- 
all strategy for all national counterterrorism activities.” Though not 
required by law, the administration published the National Strategy for 
Combating Terrorism. This document built on the principles enunci- 
ated in Bush’s National Security Strategy, providing additional details 
on the ways and means by which it would be employed—destroying 
terrorist networks, conducting a war of ideas, and strengthening 
security within the United States. The intent of the strategy for com- 
bating terrorism is not to end all terrorism everywhere, but specifi- 
cally to defeat terrorist organizations “with global reach” and access 
to weapons of mass destruction. 

The strategy for combating terrorism envisions a protracted cam- 
paign that will take many years and even if successful will require 
measures to maintain preparedness against new threats that might 
emerge in the future. The strategy calls for continuous action to dis- 
rupt terrorist activities, then degrade their supporting networks, and 
eventually destroy terrorist organizations. Rather than focusing 
specifically on al-Qaida the strategy is broad and open-ended, 
designed to be employed against any organization or state that 
employs transnational terrorism. The ways and means in the strategy 
for combating terrorism are defined by four tenets—defeat, deny, 
diminish, and defend. 
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Defeat includes efforts to identify terrorists, locate their sanctuaries, 
and destroy their ability to plan and operate. It calls for the intelli- 
gence and law enforcement communities to work closely together to 
provide information on terrorist leaders, plans, intentions, modus 
operandi, finances, communications, and recruitment. Once terrorists 
have been identified and located, the United States intends to use 
every means available to disrupt, dismantle, and destroy their capac- 
ity to undertake terrorist acts. 


The deny tenet of the strategy for combating terrorism refers to efforts 
to eliminate state sponsorship and sanctuaries. Emphasis on this 
component of the strategy was derived from the experience of al- 
Qaida’s ability to use Afghanistan and the support of the ruling 
Taliban to create a base for training, planning, and directing terrorist 
actions. Activities under this tenet include encouraging all states to 
fulfill their responsibilities to combat terrorism, providing assistance 
to states that lack the means to conduct effective counterterrorism 
operations, and convincing states that are not meeting their obliga- 
tions to change their policies. In addition to focusing on state activi- 
ties, this tenet also includes efforts centered on breaking the nexus 
between terrorism and transnational crime. 


Diminish describes collective efforts to limit conditions that terrorists 
can exploit. This tenet includes all U.S. efforts to resolve regional dis- 
putes; foster economic, social, and political development; and pro- 
mote market-based economies, good governance, and rule of law. In 
addition to these traditional elements of foreign policy, this tenet adds 
a discussion of the “war of ideas” called for in the national security 
strategy. In addition to general efforts to delegitimize terrorism and 
promote democratic, free-market alternatives, this tenet offers one 
area where the strategy focuses specifically on the threat of al-Qaida 
by calling for support to develop moderate and modern governments 
in the Muslim world. The goal is to ensure Muslims that American 
values and actions are not at odds with Islam. In particular, the strat- 
egy notes the importance of resolving the Israeli-Palestinian conflict 
as part of the war of ideas. The close U.S. relationship with Israel and 
the prevalence of extremist ideologies to use the conflict as a clarion 
call for attacks against America significantly affects the view of the 
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Defend 


United States in the Muslim world. Promoting a lasting peace, the 
strategy argues, would result in greater U.S. influence and diminish 
criticisms of American policies. 


Defend, the fourth tenet of the strategy for combating terrorism, 
encompasses the defense of U.S. territory and American interests 
abroad. The counterterrorism strategy relies heavily on the imple- 
mentation of the national homeland security strategy (discussed 
subsequently) to provide the integration and coordination required 
to protect the United States from terrorist attacks. This tenet adds 
additional objectives to expand the global aspects of domestic secu- 
rity programs. In particular, the strategy calls for increasing 
“domain awareness,” obtaining effective knowledge of activities, 
events, and persons in the dimensions of air, land, sea, and cyber- 
space. The emphasis on improving domain awareness is through 
sharing and fusing information and intelligence. This tenet also 
stresses improving the protection of citizens and infrastructure 
abroad by providing meaningful, up-to-date, and coordinated 
threat information. 


NATIONAL STRATEGY TO COMBAT 
WEAPONS OF MASS DESTRUCTION 


The National Strategy to Combat Weapons of Mass Destruction, which 
discussed ways to counter the potential use of weapons of mass 
destruction against the United States by states or nonstate groups, 
was released in December 2002. The unclassified version of the strat- 
egy was released as National Security Presidential Directive 17 and 
Homeland Security Presidential Directive 4. There is also a classified 
version of the strategy that has not been released to the public. 

The WMD strategy is based on three pillars—counterproliferation, 
nonproliferation, and consequence management. Counterproliferation 
includes measures to deter or defend against the use of WMD. 
Nonproliferation activities are those activities designed to prevent 
countries or groups from obtaining precursors that support WMD tech- 
nologies, weapons, or delivery systems. Consequence management 
includes responding to reduce the extent of damage. 
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In addition to traditional nonproliferation instruments, such as arms 
control regimes like the Nuclear Nonproliferation Treaty, the strategy 
emphasizes three new major counterproliferation efforts. The first is the 
deployment of missile defense systems capable of interdicting ballistic 
missiles. The second is the establishment of a Counterproliferation 
Technology Coordination Committee consisting of senior members 
from federal agencies who will coordinate research and development. 
The third calls for targeting specific strategies to deal with different sup- 
plier and recipient states. One program resulting from this strategy is 
the Proliferation Security Initiative (PSI). This initiative seeks to engage 
any nation whose vessels, flags, ports, territorial waters, airspace, or 
land might be used for proliferation purposes. PSI agreements include, 
for example, the authority to inspect PSI-member ships on the high seas 
that are suspected of carrying WMD-related materials. 


NATIONAL MILITARY STRATEGY 


Though not required by law, since the late 1980s the United States has 
published a National Military Strategy. The latest version of the strat- 
egy published in 2004, established winning the global war on terror- 
ism as its highest priority. Particularly, the strategy envisions that 
military assets, especially special operation forces, will be actively 
used in counterterrorism operations.* 

In addition to the role of the armed forces in supporting offensive 
operations overseas and theater security activities to help the mili- 
taries of other countries build up their capacity to conduct counter- 
terrorism activities, the strategy also calls for the Defense Department 
to work with other federal agencies, as well as Canada and Mexico, to 
form an integrated defense of the air, land, sea, and space approaches 
to U.S. sovereign territory. Additionally, the strategy calls for added 
emphasis on using military capabilities to secure and protect critical 
infrastructure that supports the deployment of U.S. forces from 
American soil and improving capabilities to provide military support 
to civilian authorities for mitigating the consequences of an attack on 
the United States. The emphasis placed on these tasks contrasts sig- 
nificantly with military strategy during the Cold War that envisioned 
U.S. forces being used almost exclusively to deter Soviet aggression. 
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NATIONAL STRATEGY FOR HOMELAND SECURITY 


Issued by the president in July 2002, the National Strategy for Homeland 
Security provides overarching guidance for the protection of the 
United States against terrorist attacks. The defense of the United 
States against more conventional military threats remains the respon- 
sibility of the Department of Defense, governed by the priorities 
established in the national security and national military strategies. 
Perhaps the most important contribution of the homeland security 
strategy was the establishment of six critical mission areas. These 
areas serve to align federal efforts, responsibilities, and resources 
within the federal budgets to specific tasks for protecting the home- 
land. In fact, beginning in 2004 the president’s annual budget pro- 
posal began to account for federal homeland security spending by 
department and overall by the mission areas listed in the strategy. 


This mission area includes efforts to deny terrorists the element of 
surprise by detecting terrorist activities before they result in attacks 
on the homeland so that preemptive, preventive, and protective 
action can be taken. Intelligence and early warning activities relate to 
domestic information gathering and the analysis of intelligence gath- 
ered worldwide to identify threats against U.S. territory. 

The 2004 strategy identified five major initiatives in this area: (1) 
enhancing the analytic capabilities of the FBI to evaluate the terrorist 
information collected; (2) building up the capabilities of the 
Information Analysis and Infrastructure Protection (IAIP) Directorate 
in the DHS; (3) implementing the Homeland Security Advisory 
System; (4) increasing analysis of dual-use technology that can be 
employed for both legitimate uses and terrorist acts; and (5) employ- 
ing red team techniques, which uncover weaknesses in homeland 
security regimes by having analysts plan how terrorists might con- 
duct attacks on the United States. 


This critical mission area includes security of borders; activities at 
ports of entry into the United States; and conveyance on airlines, rail- 
roads, public transportation, highways, pipelines, and waterways. 
The objective is to establish layered security systems that will stop ter- 
rorists while safeguarding civil liberties and privacy and promoting 
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the efficient and reliable flow of commerce and travel. Expectations 
are that no single initiative will be sufficient to impede every terrorist 
act, but that the cumulative effect of a number of measures employed 
in concert with one another will serve as a significant obstacle. 

Major initiatives called for in the strategy include ensuring 
accountability of border and transportation security; creating “smart 
borders” through the better use of technology to identify threats; 
increasing the security of international shipping containers; imple- 
menting the Aviation and Transportation Security Act of 2001; recap- 
italizing the U.S. Coast Guard, whose shipping and aviation assets are 
wearing out from increased use; and reforming immigration services. 


The activities of federal, state, and local law enforcement authorities 
comprise this critical mission area. The main objective of the strategy 
in this area is to reorient law enforcement on new counterterrorism 
objectives. While investigating and prosecuting criminal activities 
remains a responsibility, a priority is now assigned to preventing and 
interdicting terrorist activity within the United States. Equally impor- 
tant, however, is continued respect for the legal protections for civil 
liberties provided by U.S. laws. Domestic counterterrorism efforts are 
not supposed to trade off constitutional rights for added security, but 
to provide for both at the same time. 

Major initiatives to be undertaken in this critical mission area 
include measures to improve intergovernmental law enforcement 
coordination; facilitate apprehension of potential terrorists; continue 
ongoing investigations and prosecutions against known terrorists; 
restructure the FBI to make the agencies capacity to undertake 
antiterrorism operations its top priority; target and attack terrorist 
financing; and track foreign terrorists and bring them to justice. 


This critical mission area concerns harnessing science and technology 
for counterterrorism efforts. The goal of this mission area is to place 
particular emphasis on DHS research and development efforts to 
counter the threat of WMD, including detecting weapons and devel- 
oping the means to limit casualties and economic damage. 

The strategy calls for focusing research efforts on five key initia- 
tives: (1) preventing the use of nuclear weapons through better sen- 
sors for detecting nuclear materials; (2) advancing means for 
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detecting the presence of biological and chemical materials; 
(3) improving chemical detectors and decontamination techniques; 
(4) developing vaccines, antimicrobials, and antidotes that will be 
effective against a variety of biological threats; and (5) implementing 
the Select Agent Program, an effort to control the use of dangerous 
biological agents by academic and commercial research efforts. 


This critical mission area includes minimizing the damage and recov- 
ering from terrorist attacks. The objective of the strategy is to develop 
a national response system that brings together and coordinates all 
necessary response assets quickly and effectively. 

The emergency preparedness and response critical mission area 
includes more than a dozen major initiatives. The two most important 
are integrating the half dozen separate federal response plans into a 
single all-discipline incident management plan and creating a 
national incident management system. 


The strategy defines as critical those systems and assets whose 
incapacity or destruction would have a debilitating impact on secu- 
rity, national economic security, or national public health or safety. 
Sectors including critical infrastructure include agriculture, food, 
water, public health, emergency services, government, the defense 
industrial base, information and telecommunications, energy, trans- 
portation, banking and finance, the chemical industry, and postal and 
shipping. Key assets include monuments and places of national sig- 
nificance such as the Statue of Liberty. 

Initiatives for protecting critical infrastructure include unifying 
national critical infrastructure efforts under the DHS; building and 
maintaining a complete and accurate assessment of critical assets; devel- 
oping a national infrastructure protection plan; securing cyberspace; 
guarding against inside threats (attacks made by current or former 
employees); and partnering with the international community to pro- 
tect transnational infrastructure, such as global commercial shipping. 


In addition to delineating critical missions, the national homeland 
security strategy also establishes principles on how homeland secu- 
rity efforts will be funded. The strategy relies on the principles of fed- 
eralism to establish the burden for funding programs by federal, 
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state, and local governments. Thus, for example, intelligence, which 
is a national responsibility, will largely be carried out by federal agen- 
cies. On the other hand, the strategy expects that state and local gov- 
ernments will provide most of the resources and funding for 
emergency response and preparedness, while the private sector will 
bear the majority of the burden for critical infrastructure. 


NATIONAL STRATEGY FOR THE 
PHYSICAL PROTECTION OF CRITICAL 
INFRASTRUCTURES AND KEY ASSETS 


Published in February 2003, the National Strategy for the Physical 
Protection of Critical Infrastructures and Key Assets, amplifies the critical 
mission area of the homeland security strategy related to the protec- 
tion of key capabilities for commerce, governance, and public serv- 
ices. The physical infrastructure strategy delineates guiding 
principles including establishing responsibility and accountability; 
encouraging partnerships between different levels of government 
and between government and private industry; and encouraging 
market-oriented solutions to security and physical protection. 


The physical infrastructure strategy also establishes overall objec- 
tives—identifying and protecting the most critical assets with first 
priority to ensuring protection of assets facing specific, imminent 
threats and then pursuing collaborative measures to protect other 
assets that might be seen as lucrative targets in the future. The strat- 
egy defines the most critical assets as those systems and functions 
supporting public health and safety, governance, economic and 
national security, and public confidence. 


Since most critical national infrastructures are in private hands, the 
strategy envisions that the private sector will bear most of the respon- 
sibilities and cost of protecting infrastructure. The strategy also envi- 
sions that regulatory requirements should be kept to a minimum to 
allow the private sector the maximum flexibility to innovate and 
achieve the equally important goals of economic growth, dependabil- 
ity of service, and appropriate security. 
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NATIONAL STRATEGY TO SECURE CYBERSPACE 


Closely related to the physical infrastructure strategy, the National 
Strategy to Secure Cyberspace was also issued by the president in 
February 2003.” The administration defines cyberspace as systems con- 
sisting of hundreds of thousands of interconnected computers, 
servers, routers, switches, and fiber-optic cables used to transmit 
data. Cyberspace, the strategy argues, is particularly critical since 
these information systems provide much of the backbone for the 
nation’s critical infrastructure. 

As with other components of critical infrastructure, the strategy 
calls for a combination of measures designed to prevent attacks, 
reduce vulnerabilities, and minimize the damage from cyberattacks 
that do occur. 


The cyberspace strategy includes eight major initiatives: (1) establish- 
ing a public-private architecture for responding to national-level 
cyber incidents; (2) developing analysis of cyberattacks and vulnera- 
bility assessments; (3) encouraging the private sector to develop a 
synoptic view of cyberspace; (4) expanding the Cyber Warning and 
Information Network; (5) improving national incident management; 
(6) developing public-private contingency and continuity plans; (7) 
conducting national exercises; and (8) improving public-private 
information sharing. 


The cyberspace strategy finds that the private sector is best equipped 
and structured to meet cyberthreats since much of the infrastructure 
supporting national information systems is in private hands and the 
private sector is best able to leverage new technologies that can pro- 
vide enhanced security and dependability. 


In addition to promoting public-private solutions for cybersecurity, 
the cyberspace strategy also assigns roles and responsibilities to vari- 
ous federal agencies. Primary federal responsibilities are in the areas 
of forensics and attack attribution, protection of networks and systems 
critical to national security, provision of indications and warnings, and 
protection against organized attacks capable of inflicting debilitating 
damage on the national economy. The federal government is also 
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tasked to support research and development in the private sector, with 
the DHS assigned the role of being the focal point for federal outreach 
to state and local governments and the private sector. 


NATIONAL MONEY LAUNDERING STRATEGY 


The National Money Laundering Strategy, a strategy for combating the 
illicit use of monetary instruments (including cash, gold, diamonds, 
stocks, bonds, wire transfers, and credit cards), is one of two national 
strategies which, while not exclusively related to the tasks of home- 
land security, include important counterterrorism activities. For over a 
decade, Congress has required the Department of Treasury to submit 
the National Money Laundering Strategy. The September 2002 strategy, 
prepared by the department in consultation with the Department of 
Justice reflects the increased focus on disrupting funding for terrorist 
operations. 

While the September 2002 money laundering strategy still focuses 
primarily on criminal activity, it outlines a major governmentwide 
strategy to combat terrorist financing, with emphasis on adapting the 
traditional methods of countering money laundering to the uncon- 
ventional means often used by terrorist organizations. Among the ini- 
tiatives being undertaken is the Financial Attack Center, being created 
jointly by the Justice, DHS, and Treasury departments to bring 
together their most experienced financial investigators and analysts to 
prioritize targets and develop plans to attack them. 


NATIONAL DRUG CONTROL STRATEGY 


By law, the president is required to produce an annual National Drug 
Control Strategy for countering the production, transport, sale, and 
use of illegal drugs. This strategy is developed by the Office of 
National Drug Control Policy in coordination with a number of fed- 
eral agencies. It is extremely relevant to homeland security issues, 
though like the National Money Laundering Strategy it is not primarily 
designed to counter terrorist activities.” Trafficking in drugs has been 
used to fund terrorist organizations. Terrorists have also mimicked 
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the activities of drug traffickers to smuggle illicit goods. Finally, many 
of the border and transportation security resources used to root out 
terrorists are also employed to track down drug smugglers. 
Sometimes security activities are dual-use, working to disrupt both 
drug smuggling and terrorist operations. In other cases, the two mis- 
sions compete for resources and increasing effort in one area comes at 
the expense of operations conducted on the other. As a result, the 
goals and activities directed by the national drug control policy may 
have a significant impact on homeland security efforts. 

Among the initiatives in the 2004 strategy most relevant to home- 
land security and counterterrorism are efforts to link drug and money 
laundering investigations, particularly through the creation of the 
Financial Attack Center. 

Another significant initiative in the drug control strategy is efforts 
to accelerate antidrug efforts in Afghanistan. Afghanistan is not only 
the world’s largest producer of opiates, but drug profits have been 
used in the past to support its terrorist operations. The main effort 
described in the strategy for combating the use of drug trafficking by 
global terrorists is a cooperative program with the United Kingdom 
to eradicate the farming of poppies, from which opium can be 
extracted and refined into heroin, and substitute the cultivation of 
alternative crops. 


ASSESSING THE NATIONAL STRATEGIES 


There is little question but that the framework of national strategies 
provide a comprehensive and nested set of guidelines for protecting 
the homeland. Since strategies have long-term implications for the 
direction of U.S. efforts, it may require years of implementation 
before a determination can be made over whether they are effective. 

Evaluating the effectiveness and adequacies of the national strate- 
gies will be a significant challenge for policy makers in the years 
ahead and will no doubt remain a topic of discussion and debate. 
Evaluating the national strategies will likely fall into two areas. The 
first concerns the sufficiency of the strategies—whether they actually 
contain sufficient guidance to purposefully direct national policies 
and programs. The second area that will bear examination is the 
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capacity of the strategies to reduce the threat of global terrorism and 
enhance homeland security. On the second point, much of the success 
of the strategies will turn on their underlying assumptions. While 
strategies can be modified and updated as lessons are learned, strate- 
gies based on faulty premises are unlikely to prove effective in 
achieving success in a protracted conflict. 


There is no universal agreement on the necessary components of 
strategy for describing ends, ways, and means. An initial analysis of 
the national strategies by the U.S. General Accounting Office (GAO) 
listed several useful criteria. The characteristics the GAO identified 
are (1) purpose, scope, and methodology; (2) problem definition and 
risk assessment; (3) goals, subordinate objectives, activities, and per- 
formance measures; (4) resources, investments, and risk manage- 
ment; (5) organizational roles, responsibilities, and coordination; and 
(6) integration and implementation. Overall, the strategies are gener- 
ally good at establishing the purpose, scope, definition of the prob- 
lem, and overall goals. The GAO, however, determined that none of 
the strategies addresses all the elements of resources, investments, 
and risk management; or integration and implementation. On the 
whole, the GAO found that the National Strategy for Homeland Security 
and the National Strategy for the Physical Protection of Critical 
Infrastructure and Key Assets address the greatest number of desirable 
characteristics, while the National Security Strategy and the National 
Strategy to Combat Weapons of Mass Destruction address the fewest.!° 


FROM THE SOURCE: 
EVALUATING STRATEGY 


In the wake of the many strategies published after 9/11, 
Congress tasked the General Accounting Office to identify and 
define the desirable characteristics of an effective national strat- 
egy and to evaluate whether the national strategies related to 
terrorism address those characteristics. Their report was pub- 
lished in February 2004 (see Figure 12.1). 


—P— 


:52 PM Page 253 


12 


3/21/05 


Sauter ch11-14 


(voog ‘e Aueniqe4 


‘180b-70-OW9 ‘U10434 ]UALWLUAAOD UO aaIWWOD asnoH ‘SUORLJAY [euONeUJaU| pue ‘seasy, BuHawg ‘Auna euogey UO aaypuwosqns əy} 3104əq ‘sanss! aansni 
pue Áunoəs pugjəawoy ‘soap BulGeuew ‘WIA Y Epuey Aq WsOUE! 0} palay saibayens [EUOREN JO SINSHAILILYI paloejas JO UOHeN|eA USH, Bugequiog) unos 


sassaippe Aljelued 


sassaippe Ajjelued 


sassaippe Ajjelued 


sassaippe Ajjelued 


sassaippe Ajjelued 
sassaippe Alle 
ssalppe jou səoq 

uonejuawaydui 


pue 
u01}21ĵ3}U] 


sassalppe Ajjerued 


sassaippe Aljerued 


sassaippe Ajjeued 


sassaippe Aljeued 


sassaippe Aljeed 
sassalppy 
ssalppe jou səoq 


uoleulpioos 
pue 
saljijigqisuodsal 
sajo 
Jeuoneziuebic 


sassalppe Ajjelued 


sassauppe Ajjelued 


sassaippe Ajjeued 


ssauppe jou seoq 


ssəıppe jou saoq 
sassaippe Ajjeled 
ssaippe jou saoq 
uawa feuew 

ysu pue 


‘Suð W}SƏAUI 
saainosay 


sassaippe Aljerued 


sassaippe Aiyerueg 


sassaippe Ajjelued 


sassaippe Aljerued 


sassaippe Ayjelued 
sassaippe Ayjered 
sassaippe Ayjelued 


sainseaw 
aoueWwojad 
pue ‘saipaioe 
‘sannaalqo 
ayeulpiogns 
‘sjeoy 


sassaippe Aljetued 


sassalppy 


sassaippy 


ssalppe Jou saoq 


sassalppy 
sassalppy 
ssauppe jou saoq 


juawissasse 
ysu pue 
uonuyap 
wa|qold 


bk’ ok 


sassaippe Aljerued 


sassaippe Alyerueg 


sassaippy 


ssalppe Jou sə0q 


sassaippe Ayjelued 
sassalppy 
ssaJppe jou səoq 
Afojopoyyaw 


pue ‘ado9s 
asoding 


SOISLa}NeIeYO aIqeuISEep SOVS sseippe Adu} }U9}x9 Əy} pue saiba}e1}s jeuONeN 


Aayunola 


6uuapune7 Asuoyy 
aoedssagng ainaag 


aiNjonseyuy 
[east 


uojanssag sseyy 
40 suodeay 


WSUOMAL 
bunequioa 


AYUNIAS PUe|aWOY 


AyNIAS [euoleN 


(sanı poys) 
Kaes 
jeuonen 


253 


Sauter chl1-14 3/21/05 12:52 PM Page 254 5 


254 


Questioning 
Assumptions 


PART 3 * HOMELAND SECURITY 


Another means for evaluating strategies is to examine the underlying 
premises on which they are based. By questioning underlying 
assumptions, one can evaluate whether a strategy has correctly diag- 
nosed the nature of the problem and proposed adequate solutions. 
There are several issues that an assessment of the national strategies 
might explore. 


Offense versus Defense 


One key premise of the strategies is an emphasis on offense over 
defense. Rethinking the balance between offense and defense in the 
light of emerging threats should be a priority. Cold War strategy 
relied on deterrence. New strategies look to employ a mix of deter- 
rence, preemption, retaliation, and homeland security. What consti- 
tutes the best balance, and what defenses best complement offensive 
measures, are open to debate. For example, some defenses might bet- 
ter enable the offense, allowing the United States to apply diplomatic, 
economic, or military means abroad without fear that an enemy could 
retaliate on the homeland. An optimum homeland security system 
would enhance freedom of action and be facile enough to deal with 
threats that are not easily countered by offensive measures that take 
the battle to the enemy. 


War of Ideas 


A particularly important assumption in the offensive strategies 
established by the Bush administration is the importance on waging 
a war of ideas. The administration argues that reducing global ter- 
rorism requires addressing underlying problems in the developing 
world including lack of good governance and poor economic 
growth. While there are many failed and failing states, however, not 
all have proved as harbingers for transnational terrorist threats. In 
addition, many of the world’s most notorious terrorist leaders are 
well-educated and from families of some means. Some security ana- 
lysts doubt that a strong nexus can be made between transnational 
threats and weak states. Others argue that even if such a nexus can 
be made the United States can only tangentially affect development 
in these countries and that significant reforms will require home- 
grown initiatives. In short, they argue the United States cannot con- 
duct an effective war of ideas. 
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ISSUES: 
THE WAR OF IDEAS 


Announced by President Bush in November 2003, the goal of the 
Middle East Partnership Initiative is to support economic, polit- 
ical, and educational reform efforts in the Middle East by linking 
Arab, U.S., and global private-sector businesses, nongovern- 
mental organizations, civil society elements, and governments 
together to develop innovative policies and programs that sup- 
port reform in the region. 

Supporters of the initiative claim it will undercut support for 
terrorism. Some detractors counter that the United States 
should not try to impose democracy from the outside. Others 
argue that these efforts are unlikely to address the root cause of 
terrorism. 


Excerpt from the President’s Speech 


Some skeptics of democracy assert that the traditions of 
Islam are inhospitable to the representative government. 
This “cultural condescension,” as Ronald Reagan termed 
it, has a long history. After the Japanese surrender in 1945, 
a so-called Japan expert asserted that democracy in that 
former empire would “never work.” Another observer 
declared the prospects for democracy in post-Hitler 
Germany are, and I quote, “most uncertain at best’”—he 
made that claim in 1957. Seventy-four years ago, the 
Sunday London Times declared nine-tenths of the popu- 
lation of India to be “illiterates not caring a fig for poli- 
tics.” Yet when Indian democracy was imperiled in the 
1970s, the Indian people showed their commitment to lib- 
erty in a national referendum that saved their form of 
government. 

Time after time, observers have questioned whether 
this country, or that people, or this group, are “ready” for 
democracy—as if freedom were a prize you win for meet- 
ing our own Western standards of progress. In fact, the 
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daily work of democracy itself is the path of progress. It 
teaches cooperation, the free exchange of ideas, and the 
peaceful resolution of differences. As men and women are 
showing, from Bangladesh to Botswana, to Mongolia, it is 
the practice of democracy that makes a nation ready for 
democracy, and every nation can start on this path. 

It should be clear to all that Islam—the faith of one-fifth 
of humanity—is consistent with democratic rule. Democratic 
progress is found in many predominantly Muslim coun- 
tries—in Turkey and Indonesia, and Senegal and Albania, 
Niger and Sierra Leone. Muslim men and women are good 
citizens of India and South Africa, of the nations of Western 
Europe, and of the United States of America. 

More than half of all the Muslims in the world live in 
freedom under democratically constituted governments. 
They succeed in democratic societies, not in spite of their 
faith, but because of it. A religion that demands individual 
moral accountability, and encourages the encounter of the 
individual with God, is fully compatible with the rights and 
responsibilities of self-government. 

Yet there’s a great challenge today in the Middle East. 
In the words of a recent report by Arab scholars, the global 
wave of democracy has—and I quote—"barely reached the 
Arab states.” They continue: “This freedom deficit under- 
mines human development and is one of the most painful 
manifestations of lagging political development.” The free- 
dom deficit they describe has terrible consequences, of the 
people of the Middle East and for the world. In many 
Middle Eastern countries, poverty is deep and it is spread- 
ing, women lack rights and are denied schooling. Whole 
societies remain stagnant while the world moves ahead. 
These are not the failures of a culture or a religion. These are 
the failures of political and economic doctrines. 


1. Will the war of ideas work and will it address the issue of 
transnational terrorism? 
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2. What does the United States have to do to be successful in a 
war of ideas? 


3. Are other U.S. actions around the world consistent with the 
goals of the war of ideas? 


4. What are the alternatives to a war of ideas? Would they be 
more successful? If so, why? 


Threat of WMD 


The national strategies also assume that transnational terrorists may 
well obtain and employ WMD. To that end, emphasis in both offen- 
sive and defensive strategies is focused on responding to this chal- 
lenge. Some national security analysts argue that this emphasis is 
unwarranted and the terrorists are likely to use more readily available 
means to threaten the homeland." Others argue that the danger of 
WMD attacks is far graver than currently realized and that the Bush 
administration’s efforts are inadequate. 


Layered Defense 


The defensive strategies also reflect a clear preference by the admin- 
istration. The homeland security strategy and its supporting direc- 
tives assume the United States will undertake a layered approach to 
its security system. This approach engenders both advantages and 
disadvantages. One advantage of multiple layers of security is that it 
complicates the obstacles facing terrorists. In addition, the redundan- 
cies provide multiple defenses that mitigate the requirement for any 
one system to function flawlessly. A disadvantage of multiple meas- 
ures is that it could prove more expensive to maintain and coordinate 
numerous disparate security systems. Additionally, it may be unclear 
how much protection is achieved through layered security until all 
the systems supporting them are up and running. 


Sufficient Strategies 


One subject for debate is whether the current strategies sufficiently 
address all the critical mission areas related to homeland security. For 
example, maritime, border, and transportation security are interrelated, 
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complex missions. While each element of these challenges is addressed 
in the various defensive strategies, it is not clear that they comprise a 
holistic solution to the terrorist threats shared in all these areas. 
Another area of concern is the nexus between terrorism and transna- 
tional crime. Although the national drug policy and money laundering 
strategies address these problems, terrorists have also used other man- 
ners of crimes including identity theft, insurance fraud, and human 
smuggling. Thus, a specific national strategy on transnational crime 
should be required to sufficiently address this problem. 


Adequacy of Resources 


Federal spending on homeland security more than doubled after the 
9/11 attacks. The Bush administration’s strategy for homeland secu- 
rity, however, did not envision substantial further increases in federal 
spending. The strategy’s stated preference is to rely on the principles 
of federalism and cost sharing between the public and private sectors. 
This approach may not be sufficient to ensure adequate participation 
by cash-strapped state and local governments, as well as by a private 
sector that may prove reluctant to invest in improvements to protect 
critical infrastructure. On the other hand, the administration’s pro- 
posed funding scheme may prove more sustainable over the long- 
term. In addition, this issue still begs the fundamental question of 
how much homeland security spending is sufficient to meet the threat 
of global terrorism. 


CHAPTER SUMMARY 


The national strategies provide comprehensive guidance on prose- 
cuting the war on terror and protecting the homeland. Key concepts 
include the notion that the best means to defend the United States is 
to diminish the capacity of terrorist networks overseas to plan, pre- 
pare for, and conduct operations. In addition, the strategies acknowl- 
edge that securing the homeland is also important. They call for a 
“layered defense” that employs numerous organizations, programs, 
and activities. The strategies also envision shared responsibilities for 
federal, state, local, tribal, and private entities. 
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While the strategies offer a plethora of guidance, many questions 
remain over how effective they may prove. Key issues include ade- 
quacy of funding, the role of the war of ideas, and the potential threat 
of WMD. 


CHAPTER QUIZ 


1. What is meant by the war of ideas, and why is it important to U.S. 
strategy? 


2. What does the concept of layered defense mean? 


3. What are the critical missions in the National Security Strategy, 
and why are they important? 


4. How does the United States plan to “win” the war against 
transnational terrorism? 


5. Who will pay for providing homeland security? 
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DOMESTIC ANTITERRORISM AND 
COUNTERTERRORISM 


The New Role for States and 
Localities and Supporting 
Law Enforcement Agencies 


The attacks of September 11 . . . redefined the mission of federal, state, 

and local law enforcement authorities. While law enforcement agencies 
will continue to investigate and prosecute criminal activity, they should 
now assign priority to preventing and interdicting terrorist activity within 
the United States. 


National Strategy for Homeland Security 


CHAPTER OVERVIEW 


The 9/11 attacks created a new focus on the roles of state and local offi- 
cials in preventing terrorism in their communities and responding to it 
if it does occur. State and local officials are on the front lines of home- 
land security, and in many cases, local police will have the first oppor- 
tunity to detect and prevent terrorism. Because of this, state and local 
governments are now undertaking programs of antiterrorism, generally 
used to describe passive or defensive measures against terrorism, and 
counterterrorism, which usually describes proactive measures, includ- 
ing targeting terrorist personnel and supporters. Should these pro- 
grams fail, it will be local officers, firefighters, and emergency medical 
personnel who will be first on the scene of a terrorist attack. 
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State and local jurisdictions across the nation have been grappling 
with these responsibilities. Their success could mean preventing a 
major attack or lessening the human and financial toll when one 
occurs. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Explain the role of state and local agencies in domestic coun- 
terterrorism. 


Describe the role of intelligence in domestic counterterrorism. 


List state and local strategies for preventing and interdicting 
terrorism. 


4. Provide examples of state and local efforts to respond to terror- 
ist events that do occur. 


THE FRONT LINES OF TERRORISM 


As the 9/11 hijackers prepared for their mission, they managed to 
avoid the FBI, CIA, and other agencies viewed as America’s front line 
of defense against terrorism. But some of them were stopped before- 
hand—for traffic violations. While these stops did not disrupt the ter- 
rorist plot, similar incidents have lead to the capture of terrorists. In 
1988, a hardened Japanese Red Army terrorist, transporting bombs in 
his car as part of an apparent plot against New York City, was cap- 
tured at a New Jersey Turnpike rest stop by a trooper who thought he 
was acting suspiciously. While Timothy McVeigh was not stopped 
before his attack, he was arrested soon after—by an Oklahoma 
Highway Patrol trooper who stopped him for missing a license plate, 
speeding, and failing to wear his seat belt. In other cases, investiga- 
tions by local officials have uncovered organized crime and other 
support activities linked to terrorist groups. However, many of these 
cases were broken by luck rather than by a specific strategy. In the 
current environment, state and local officials are developing specific, 


—P— 


Sauter chl1-14 3/21/05 


12:52 PM Page 263 5 


CHAPTER 13 * DOMESTIC ANTITERRORISM AND COUNTERTERRORISM 263 


proactive plans and programs to prevent and respond to terrorist acts 
in their jurisdictions. 


JURISDICTIONS AND RESPONSIBILITIES 


The Department of Homeland Security (DHS) is the lead agency for 
protecting the American homeland and has as a key mission to “pre- 
vent and deter terrorist attacks and protect against and respond to 
threats and hazards to the nation.”! The DHS is assisted by numerous 
other federal agencies, most notably the FBI, which provides law 
enforcement, intelligence, and hostage rescue/special operations 
capabilities. 

But it is state and local governments that have jurisdiction over 
most aspects of daily life. State criminal codes and state and local law 
enforcement agencies make up the bulk of the criminal justice system. 
It is up to governors, county supervisors, and mayors to protect the 
citizens in their jurisdictions. Many of the nation’s critical infrastruc- 
tures and key assets are either controlled by state and local govern- 
ments (such as airports and ports) or regulated by them (like building 
codes governing skyscrapers and utilities). 


STATE AND LOCAL PLANNING 


After 9/11, many states created homeland security offices; most have 
developed specific homeland security plans. This model has been fol- 
lowed by local jurisdictions such as counties and cities. Because there 
are far more state and local first responders than federal ones, these 
state and local plans, and more specific operational and enforcement 
strategies, direct the majority of America’s domestic counterterrorism 
activities. The federal government has attempted to coordinate state 
and local planning, including through the DHS which provides bil- 
lions of dollars in funding—along with training, planning, exercise, 
and technical assistance programs—to state and local jurisdictions. In 
order to gain this support, states must develop and submit homeland 
security assessments and strategies. For example, the Commonwealth 
of Massachusetts developed a plan based on intelligence and warning; 
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transportation security; domestic counterterrorism; protecting critical 
infrastructures and key assets; defending against catastrophic threats 
(WMD); and emergency preparedness and response.” 

While they vary from jurisdiction to jurisdiction, state and local 
strategies include many common elements. They are driven by 
requirements, plans, training, assessments and evaluations, and cor- 
rective actions. They often include prevention, protection, response, 
and recovery components and an emphasis on coordination, commu- 
nication, and interoperability among jurisdictions. 


In the past, most state and local jurisdictions did not have substantial 
counterterrorism budgets. So in order to improve their security, they 
must reallocate existing resources and/or find new ones. This has 
proven extremely challenging, especially due to budget shortfalls that 
have hit many states over recent years. 

This effort has often involved creating and equipping new security 
units and upgrading the capabilities of old ones. In some cases, they 
have been funded by federal grants; in others, existing functions have 
been reduced in order to support new security requirements. Some 
jurisdictions have also refocused the efforts of current programs. For 
example, intelligence units that once focused on a wide variety of 
organized crime now spend more time on terrorism. Or motor vehi- 
cle departments devote more resources to preventing applicants from 
falsely obtaining driver’s licenses. 

In some cases state and local resources are supplemented by fed- 
eral grants. With the creation of the Department of Homeland 
Security an effort was made to consolidate most federal assistance 
involving domestic security in the new department under the Office 
of State and Local Government Coordination and Preparedness. 
Included in these grants are programs formerly administered by the 
Department of Justice to provide training and equipment assistance 
to state and local law enforcement for domestic counterterrorism 
operations. 


States have also moved to increase the focus of their criminal justice 
and legal systems on terrorism. In the wake of 9/11, for example, 
New York, Pennsylvania, Virginia, and several other states enacted 
additional statutes to define terrorist crimes and provide enhanced 
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Planning, 
Coordination, 
and Information 
Sharing 


law enforcement investigative authorities. Furthermore, legislation 
provided additional penalties for terrorist acts. The New York law, for 
example, allows for the death penalty in the case of murder commit- 
ted during the commission of a terrorist act. In some cases, states have 
passed new laws to toughen regulations on gun and explosives pos- 
session. Additional legal measures included establishing standards 
for action against suspected terrorists under existing laws such as 
conspiracy statutes. 


In the wake of 9/11, local officials have stepped up their coordination 
and information sharing with other government organizations. This 
includes sharing among different agencies in the same jurisdiction 
(i.e., police with fire department with private sector in the same city); 
different jurisdictions within the state (i.e., cities with counties with 
state); different states within a region (i.e, New York and New 
Jersey); and states with the federal government. 


FBI’s Joint Terrorism Task Forces 


The lead federal agency for coordinating counterterrorism activities is 
the FBI. The FBI’s Joint Terrorism Task Forces (JTTFs) represent one 
example of how activities at all levels of government can be inte- 
grated. The JTTFs bring together state and local law enforcement offi- 
cers, FBI agents, and representatives from other federal agencies to 
work on common terrorist cases. They also provide a forum for intel- 
ligence sharing and coordination. As of 2004, more than 2,300 person- 
nel were assigned to JTTFs at each of the FBI’s 56 main field offices and 
10 other locations.* A typical JTTF will include two divisions, one for 
intelligence collection and analysis and another for investigations. 


Statewide Intelligence Offices 


The JITFs are not the only instruments for statewide coordination. 
Some states have established statewide intelligence offices. Others 
employ designated state homeland security offices to dispense infor- 
mation. Additionally a number of states have established regional 
state domestic counterterrorism task forces that mirror the federal 
JTTF. In other cases, such as Florida, local domestic counterterrorism 
task forces have been collocated or even integrated with the federal 
task forces. 
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Federal Data 


State and local enforcement agencies can also obtain information 
from federal sources through database and federal coordination cen- 
ters. The Department of Homeland Security, for example, distributes 
information to the major cities and state homeland security offices 
through its Homeland Security Operations Center. Most of this infor- 
mation deals with day-to-day activities. For information that might 
be directly relevant to a particular investigation, law enforcement 
services can query the National Criminal Investigation Center 
(NCIC). The NCIC is a computerized index of criminal justice infor- 
mation that is maintained by the FBI and available to federal, state, 
and local law enforcement and other criminal justice agencies. The 
database includes the agency’s Interstate Identification Index (crimi- 
nal history information); Wanted Persons File; Missing Persons File; 
Unidentified Persons File (to cross-reference unidentified bodies 
against records in the Missing Persons File); Foreign Fugitive File; 
and Violent Gang/Terrorist File (used to identify criminal gangs and 
their members to local, state, and federal law enforcement). The data- 
base also includes the U.S. Secret Service (now part of the Department 
of Homeland Security) Protective File, which maintains names and 
other information on individuals who are believed to pose a threat to 
the president. The law requires the agency to share information in the 
Interstate Identification Index and the Wanted Persons File as well as 
other files as agreed to by the attorney general and the FBI. 


Federal Centers 


In addition to the NCIC there are a number of other federal assets 
available to state and local governments. The El Paso Intelligence 
Center (EPIC), staffed by 14 federal agencies, has cooperative infor- 
mation-sharing agreements with every state on information regard- 
ing drug movement and immigration violations, data that might also 
be useful for related counterterrorism investigations. The Terrorist 
Screening Center is a one-stop point of contact for law enforcement 
agencies that can query all federal terrorist watch lists. The 
Department of Homeland Security’s Law Enforcement Support 
Center provides immigration status and identity information to local, 
state, and federal law enforcement agencies on aliens suspected, 
arrested, or convicted of criminal activity. 
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Movement to Greater Dissemination 


Today, many of these services are accessed by phone, fax, and e-mail. 
There are plans, however, to use information technology to create 
more Web-based, interactive, and collaborative services. Released in 
May 2004, the Department of Justice’s National Criminal Intelligence 
Sharing Plan calls for developing a strategy to share information on a 
routine basis. Initiatives include creating an FBI Intelligence Web page 
as part of Law Enforcement Online to make information available at 
the unclassified level for FBI partners in state and local law enforce- 
ment. The FBI has also established a field intelligence group (FIG) in 
each FBI field office. The FIGs are the bridge that joins national intelli- 
gence with regional and local intelligence information through entities 
like the JTTFs. Meanwhile, the department is exploring how new tech- 
nologies can be used to enhance information sharing. 


Current Information-Sharing Systems 


The Joint Regional Information Exchange System (JRIES) began in 
December 2002 as a pilot program to share counterterrorism informa- 
tion between state and local law enforcement and the Department of 
Defense. It came out of the Defense Intelligence Agency-led Joint 
Intelligence Task Force—Combating Terrorism (JITF-CT). The first 
participants included the New York Police Department Counter 
Terrorism Bureau and the California Department of Justice Anti- 
Terrorism Information Center; the number of states, localities, and 
federal agencies participating in the network increased once the pro- 
gram became operational. 

In February 2004, the DHS started the Homeland Security 
Information Network, with the goal of connecting all U.S. states, 
five territories, the District of Columbia, and 50 urban areas with the 
Homeland Security Operations Center (HSOC). The DHS has contin- 
ued using the JRIES infrastructure, but has expanded both its capa- 
bilities and users. Instead of having law enforcement as its sole user 
group, the program is broadening its real-time homeland security 
information sharing. 

JRIES uses a secure virtual private network with encrypted com- 
munications to connect the participants’ databases over the Internet. 
The system has commercial off-the-shelf components and Web-based 
software for user access to databases, analysis applications, secure 
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e-mail, and collaborative environments in real time. Currently, partic- 
ipants may exchange sensitive but unclassified information. DHS 
plans to upgrade network security to allow for the exchange of cer- 
tain classified-level information in the near future. There are also 
plans to connect JRIES to the Regional Information Sharing System 
and the FBI’s Law Enforcement Online (LEO) Network. 

The Regional Information Sharing System (RISS) Program com- 
prises regional centers that share intelligence and coordinate efforts 
against criminals who may operate in multiple jurisdictions. The pro- 
gram supports prosecution of traditional crimes like drug trafficking, 
but also targets terrorism, violent crime, cybercrime, gang activity, 
and organized crime. There are member agencies in every state, 
Washington, DC, U.S. territories, and internationally. The program 
supplies information-sharing resources, analytical services, special- 
ized equipment loans, training, and technical assistance. 

The Department of Justice developed the RISS program in 1974 to 
assist police departments in the southern United States in exchanging 
information via computers. RISS has six regional centers: Mid 
Atlantic-Great Lakes Organized Crime Law Enforcement Network 
(MAGLOCLEN), Mid Atlantic Organized Crime Information Center 
(MOCIC), New England State Police Information Network (NESPIN), 
Rocky Mountain Information Network (RMIN), Regional Organized 
Crime Information Center (ROCIC), and the Western States 
Information Network (WSIN). 

The primary information-sharing tool is RISSNET, a secure 
intranet, which allows members to share sensitive but unclassified 
information. Participants can have either a single computer attached 
to the intranet or act as a node to give access to more law enforcement 
personnel in that agency. RISSNET participants use a virtual private 
network (VPN) connection over the Internet to access the RISSNET 
gateway firewall, whereupon the user’s identity is authenticated and 
access is granted to the secure intranet. The secure intranet is a dedi- 
cated network carried over frame relay circuits (a guaranteed amount 
of bandwidth carried over public telephone lines) connecting the 
RISS centers to the database resources. The data on the intranet are 
protected by encryption, smart cards, and other security protocols. 

A recent addition is the RISS Anti-Terrorism Information Exchange 
(ATIX). This RISS subcomponent became operational in April 2003. 
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The ATIX communities differ from the typical RISS users; they 
include state, county, local, tribal, and federal government; law 
enforcement; emergency management; disaster relief; utilities; and, 
among others, the chemical, transportation, and telecommunication 
industries. The system includes secure ATIX Web pages, a bulletin 
board, a real-time communication tool, and e-mail. RISSNET is also 
connected to the FBI’s LEO system. 


Future Information-Sharing Systems 


The Intelligence Reform and Terrorism Protection Act of 2004, com- 
monly known as 9/11 Reform Bill, mandated that the president estab- 
lish an information-sharing environment (ISE) to distribute intelligence 
regarding terrorism to appropriate federal, state, local, and private 
entities. Section 1016 of the law requires designating an organiza- 
tional and management structure to establish and maintain the ISE 
and report back to Congress within one year on the plans for imple- 
mentation. The law also called for creating an Information Sharing 
Council to advise the president and the ISE program manager on 
developing policies, procedures, guidelines, roles, and standards for 
establishing and maintaining the ISE. 


Many jurisdictions have conducted special basic counterterrorism 
and response training; some have even added it to basic in-service 
training programs. While the federal government has been slow in 
promulgating training standards and best practices, it has provided 
significant financial support for local training efforts, along with 
courses and curricula provided by residential training facilities such 
as the National Emergency Training Center (NETC). Local institu- 
tions such as community colleges have also begun offering counter- 
terrorism training to first responders. 

Federal grants have also provided state and local organizations 
with the ability to purchase new equipment. In many cases this has 
consisted of gear designed for WMD attacks, such as personal pro- 
tective equipment (PPE), detection devices, and decontamination 
devices and supplies. A major national push to help agencies at all 
levels of government procure equipment and adopt procedures to 
allow interoperable radio communications remains at an early 
stage. 
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One area in which many local jurisdictions, and even the FBI, lagged 
before 9/11 was in the advanced use of intelligence to prevent and 
solve crimes. While some intelligence is available through the federal 
resources described earlier, state and local jurisdictions are now cre- 
ating clearinghouses for information and intelligence, sometimes 
called “all source intelligence fusion centers.”° Such centers fuse intel- 
ligence from different sources, such as informers or radio intercepts; 
different organizations, such as police departments and federal agen- 
cies; and different types, such as written reports and imagery. 

The aim of these centers, which must be established only with care- 
ful reference to state and federal law, is to discern the capabilities and 
intents of terrorists. Long used by federal intelligence agencies and 
military units, the intelligence process involves collecting, analyzing, 
evaluating, storing, and disseminating intelligence. 


Collecting and Analyzing Intelligence 


In order to get the raw data needed for analysis, jurisdictions create 
specific “intelligence requirements” for officers and others in the 
field. Departments may use community policing techniques to drive 
collection, reaching out to citizens and private-sector groups. There is 
often a focus on creating a clear line from the collector in the field to 
the intelligence center; more sophisticated organizations also find 
ways to reward collectors for providing information, which may 
require little more than giving them feedback on its value. 

Officers should also be trained on specific clues of terrorist activi- 
ties. For example, an officer who knows that castor beans are used to 
create the deadly poison ricin might be able to tell an improvised 
biological weapons project from a meth lab. An agent who knows the 
commercially available components used in chemical weapons 
might report them more quickly if he or she saw them at a crowded 
stadium. 

Officers can also use traditional methods to generate intelligence, 
such as using seat-belt and sobriety checkpoints. Such efforts may be 
increasingly effective as the federal government updates the NCIC, 
adding subjects of terrorism investigations.° 

Targeting scams used by terrorist fund-raisers is an excellent intel- 
ligence-gathering tactic for state and local authorities and is discussed 
subsequently. Some agencies also harness their own management 
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systems for intelligence. For example, the theft of police uniforms or 
emergency vehicles could be key information. 

Finally, state and local authorities, often working with federal offi- 
cials, may use advanced sensing and surveillance equipment to 
gather intelligence. 

Once the intelligence is collected, it may be graded for reliability 
and other factors. Then it must be analyzed through techniques such 
as spatial, association, and temporal charting; link analysis; and 
financial analysis. 


Dissemination and Warnings 


Once the data are received, analyzed, and turned into “intelligence 
products” such as reports and warnings, the information must be dis- 
seminated. This is a critical step in the process; ineffective information- 
sharing procedures and networks can waste even the best intelligence. 
For security reasons, the sharing of intelligence is typically done on a 
need-to-know basis, in which personnel receive only the intelligence 
they need to know to perform their assignments. Agencies may try to 
produce their reports with a tear line, the place at which more sensitive 
information—such as the sources and methods used to obtain the 
information—ends and the less sensitive information begins. In this 
way, it is easier to provide a wider audience with the report by simply 
providing them with the data “below the tear line.” 

Jurisdictions also develop an understanding of indications and 
warnings (I&W), red flags that signal the potential for an imminent 
attack. These red flags should trigger a planned response from the 
jurisdiction. For example, if police officers spot a suspicious person 
surveilling a chemical plant a week after explosives have been stolen 
from the local quarry, the plan should be set to respond with an auto- 
matic increase in security levels, which might include warnings to 
key members of the private sector. 


The most effective way for state and local authorities to prevent ter- 
rorism is to understand terrorist phases and operations and direct spe- 
cific efforts at them. As discussed earlier, key terrorist support 
activities include recruitment and indoctrination; fund-raising; net- 
work building; training; logistics/supply /communication; and prop- 
aganda and psychological operations. Operational phases consist of 
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target selection; intelligence, surveillance, and reconnaissance activi- 
ties; operational planning of the attack; recruitment of specialized per- 
sonnel; surveillance on the target; countersurveillance to ensure the 
plotters have not been detected; rehearsals/dry runs; training for spe- 
cific elements of the attack; movement to the attack; the attack itself; 
escape/exfiltration from the site; exploitation of the attack through 
propaganda or intelligence techniques; and after-action reviews. 

A strong counterterrorism strategy addresses countermeasures to 
all these phases and operations, plus creates target countermeasures 
based on likely terrorist tactics. For example, officer survival training 
should include scenarios based on the different threats posed by ter- 
rorists during varying phases of their operations. When some of 9/11 
hijackers were stopped for traffic violations during their training and 
rehearsal stages, they did not resist. However, had they been pulled 
over on their way to the airport on September 11, their reaction might 
have been quite different. 

Terrorists and their supporters in the United States may be espe- 
cially vulnerable to detection during certain of these phases and oper- 
ations, including surveillance and fund-raising. 


Countersurveillance 


Every jurisdiction has more critical facilities than could ever be pro- 
tected all at once; the best way to prioritize is by letting the terrorists 
identify which potential target is most important. Al-Qaida and other 
terrorist groups have a record of meticulous surveillance of the targets; 
according to the FBI, terrorists may prepare “targeting packages” using 
photographs, CAD/CAM (computer-assisted design/computer- 
assisted mapping) software, and notes. They gather information from 
vehicles or by loitering near targets, perhaps in the guise of tourists or 
vendors. Jurisdictions with aggressive countersurveillance programs 
are in a position to detect such activities. Countersurveillance can 
include undercover observation and technical equipment such as cam- 
eras. Encouraging private security personnel and the public to watch 
for surveillance increases the chances of detecting it before an attack. 


Fund-Raising and Organized Crime 


As discussed earlier, the FBI has stated that operatives from such ter- 
rorist groups as Hizballah, HAMAS, and the PIJ are conducting fund- 
raising and support activities in the United States. Terrorist groups must 
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have money to operate. Their funding sources can include fake chari- 
ties, counterfeit apparel, robberies, blackmail, kidnapping for ransom, 
legitimate businesses, support from high-net-worth individuals, and 
money from foreign governments. Operatives linked to al-Qaida in the 
United States have also been linked to shoplifting, stealing luggage, 
picking pockets, and credit card fraud. However, organized crime and 
scams, often combined with money laundering, are key activities linked 
to terrorist supporters. In 2002, more than 500 Arab- and Muslim-owned 
small businesses across the United States, many of them convenience 
stores, were reportedly under investigation to determine if they were 
involved in such activities.” Terrorist supporters in the United States are 
accused of employing a range of criminal activities to raise funds. 


Baby Formula Diversion. Texas authorities have estimated that criminal 
rings steal millions of dollars of formula per year in that state alone. 
Scammers exchange the formula for federal vouchers provided to 
poor mothers. The customer and baby may end up with improperly 
stored and outdated formula; the criminals get a hefty profit that, 
according to investigators, has sometimes been shipped to shadowy 
bank accounts in the Middle East. In 2003, Arizona’s Joint Terrorism 
Task Force brought charges in connection with a baby formula case 
and related criminal activity estimated to have generated $22 million. 


Drugs. Arab-American criminal groups active in New York, Michigan, 
and Canada were implicated in a huge federal investigation called 
Operation Mountain Express. According to prosecutors, the group 
arranged for pseudoephedrine to be trucked from Canada into the 
United States, where it was sold to Mexican gangs who used it to cre- 
ate methamphetamine. The scheme made millions, some of it traced 
to Hizballah accounts.” 


Coupon Fraud. Those tiny coupons can add up to millions of dollars in 
fraud. In the typical case, crooks clip coupons and deliver them to store 
employees with whom they are in cahoots. The employees redeem the 
coupons without selling the products. Coupon fraud has been connected 
to terrorism in several cases according to congressional testimony and 
news reports. Mahmud Abouhalima, an Islamic extremist also known as 
Mahmud the Red for his hair, allegedly ran a coupon scam before being 
arrested and convicted in the 1993 World Trade Center bombing. 
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Cigarette Smuggling. A federal investigation called Operation Smokescreen, 
uncovered a group of Lebanese men who had entered the United 
States with illegal visas, engaged in marriage fraud to remain in the 
country, and engaged in organized crime, including credit card fraud 
and money laundering. They sold millions of dollars in smuggled cig- 
arettes, bought in North Carolina where taxes were low and resold in 
Michigan at a hefty markup. Part of the proceeds was sent to 
Hizballah, and the plot also helped supply the terrorist group with 
laser range finders, night vision devices, stun guns, mine detection 
equipment, and other devices. The ringleader was sentenced in 2003, 
but several charged suspects, including the alleged chief of Hizballah 
procurement, escaped apprehension." 


ISSUE: 


PREVENTING TERRORISM WHILE PROTECTING 
CIVIL LIBERTIES 


The driving principle of domestic counterterrorism is to stop ter- 
rorism before it occurs. That requires good intelligence. But it’s 
also critical that best practices be used to control how intelligence 
is collected, safeguarded, and employed. Civil libertarians and 
privacy advocates have raised serious concerns about domestic 
intelligence collection at the federal level, concerns that will cer- 
tainly arise more and more frequently at the state and local levels. 
For example, by 2004 controversy over the federally supported 
MATRIX (Multistate Anti-Terrorism Information Exchange) data- 
base and information-sharing system had lead some states to drop 
out of the program. Other types of initiatives, including the instal- 
lation of surveillance cameras and targeted law enforcement 
crackdowns on scams, have also drawn criticism. 

Ethnic and religious profiling is another concern raised by 
aggressive intelligence collection. Not all terrorists are from Islamic 
extremist groups; as discussed earlier, many of the most dangerous 
extremists in the United States are members of domestic groups. 
While Islamic terrorists and their supporters are Muslims, the vast 
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majority of Americans who follow the Islamic faith has nothing to 
do with terrorism or its supporters. In addition, contrary to stereo- 
types about Arab terrorists, al-Qaida operatives and their support- 
ers have included those with European, Asian, Hispanic, and 
African-American backgrounds. Muslim-Americans and Arab- 
Americans have expressed significant concerns about law enforce- 
ment and domestic intelligence-gathering activities many believe 
are disproportionately aimed at their communities. They point out 
that members of the Arab, Muslim, Sikh, and South-Asian com- 
munity were not only victims of the 9/11 attacks themselves, but 
all too often endured vicious discrimination, public hostility, and 
bias crimes afterwards. By early 2004, the federal government had 
investigated 546 alleged hate crimes against these groups since 
9/11, including not only personal attacks, but plots to bomb loca- 
tions where Muslim-Americans gather.1? 


1. How should state and local jurisdictions meet the need to 
gather terrorism intelligence with the requirement to protect 
the civil rights of their citizens? 

2. What types of data should state and local agencies be able to 
store in their data fusion centers? For how long? With what 
safeguards? 

3. What policies should be in place to prevent racial, religious, 
and ethnic profiling? 

4. How might state and local agencies use prevention policies to 
increase cooperation in local communities? 


Document Fraud 


Terrorists and other criminals often travel with fake or illegitimate 
documents. Detecting such documents, or uncovering their sources, 
can help uncover terrorist activity. The tools and skills required to 
reveal fake documents need not be complex. First, investigators must 
know what real ones look like; important types are birth certificates, 
Social Security cards, driver’s licenses, INS documents (especially I- 
551s, or “green cards,” and I-94s, or arrival/departure records), State 
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Department documents (U.S. passports and visas), and foreign 
passports. Then, by using magnifying glasses, officers can check 
pertinent documents for microlines, the tiny print found on Social 
Security cards, passports, and many driver’s licenses. Because 
microlines require sophisticated printing, they are difficult for most 
criminals to counterfeit. The same is true for the images on many 
documents that can only be detected under ultraviolet lights. 

Many of the 9/11 hijackers used legitimate documents, such as 
Virginia driver’s licenses, they had obtained through the use of 
fraud. Government investigators believe they employed the 
licenses to board their flights in order to avoid suspicions raised by 
showing a foreign passport.’ Terrorists may use bogus IDs such as 
fake birth certificates—known as breeder documents—to obtain 
real documents. In this case, careful examination and questioning 
can expose the subterfuge. In some cases, criminals have actually 
traveled with identification under multiple names, a dead give- 
away if detected. Investigators can ask suspicious people for mul- 
tiple forms of identification, checking data from one against the 
other, asking questions and “peeling back the onion” to trip up 
even trained terrorists. 


A common and effective countermeasure is target hardening, which 
often focuses on high-risk and high-consequence structures such as 
bridges, tunnels, and stadiums. Facilities holding potential biological 
and radioactive weapons material, which exist at many universities, 
are also priorities. 

Jurisdictions may employ the Crime Prevention through 
Environment Design (CPTED) principles at such locations. These 
include access control and surveillance, along with encouragement of 
“territoriality,” or a sense of ownership and protectiveness, among 
citizens involved with the facility. Specific countermeasures often 
include obstacles to keep trucks from potential targets, security cam- 
eras, police and security presence, random inspections of vehicles, 
and searches of people. 

The deterrent effect of target hardening is clear; for example, con- 
victed al-Qaida operative Iyman Faris allegedly sent a message to the 
group’s leadership that the “the weather is too hot,” indicating secu- 
rity was too tight for a planned attack on the Brooklyn Bridge.'* 
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FROM THE SOURCE: 


WASHINGTON STATE’S TERRORISM PREVENTION PLAN 


Excerpted from the Washington Statewide Homeland Security Plan 
Objectives and Strategies 


3.1 Develop and implement terrorism monitoring, threat 
assessment, and information sharing systems. 


3.1.1 Partner regionally and nationally to develop and imple- 
ment effective systems for terrorist threat monitoring and sur- 
veillance. 


3.1.2 Define the essential elements of critical homeland secu- 
rity information. 


3.1.3 Establish a system for dissemination of all relevant ter- 
rorism data and information to ensure reliable capability to 
alert officials and emergency response personnel of terrorist 
threats statewide. 


3.1.4 Establish a statewide prevention information, analysis, 
and intelligence sharing and infrastructure protection capability. 


3.1.5 Integrate daily use systems used in emergency response 
coordination into the information collection and dissemina- 
tion system. 


3.1.6 Create a central antiterrorism intelligence and analytical 
center [(Washington Joint Analytical Center—(WAJAC)]. 


3.1.7 Establish one additional regional intelligence group; 
strengthen capacities and capabilities of existing groups. 


3.2 Coordinate statewide for prevention plans, assessments, 
procedures, infrastructure protection, and funding priorities. 


3.2.1 Use the state homeland security structure to coordinate 
and facilitate the building prevention capacity. 
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3.3 Adopt or develop an apppropriate analytical “risk man- 
agement” model to assess risk or vulnerability and identify 
methods to reduce risk. 


3.3.1 Establish threat reduction “anti-terrorism” activities, 
assist and educate the private sector. 


3.4 Improve threat recognition to halt the development of a 
terrorist threat before it is executed. 


3.4.1 Create a system to regional system capability that con- 
sists of a full computerized file system that is integrated 
between regions; system capability should include analytical 
software and GIS imagery with law enforcement database 
sharing to collect, screen, and store relevant information with 
prevention investigative value. 


3.4.2 Map threats and capabilities for preemptive action. 


3.4.3 Explore the use of remotely sensed Geographic 
Information Systems (GIS) data in the effort to map statewide 
threats. 


3.4.4 Establish a public and private community based pre- 
incident “threat indicator” training program. 


3.5 Improve the northern border area security. 


3.5.1 Define roles and responsibilities and work on actions to 
improve the northern border area security. 


RESPONSE 


If prevention fails, state and local law enforcement will be called to 
the scene. This can include tactical responses to suspected terrorists 
and terrorist attacks. Specialized units such as SWAT teams must be 
prepared to engage terrorists, but as discussed earlier, street officers 
also need a basic awareness of terrorist tactics. For example, domestic 
and international terrorists are known to use ambushes as a tactic. But 
many, perhaps most, police officers have not been trained to respond 
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Recognizing an 
Attack 


Following Self- 
Protection and 
Protection 
Measures 


Reporting Incident 
and Initiating 
Command 
Systems 


to a vehicular ambush, in which the natural reaction of many people 
may play right into the hands of the attacker. 

More attention has been paid to training for WMD scenes. While sim- 
ilar in some ways to the HAZMAT (hazardous materials) disasters for 
which fire departments, emergency management agencies, and emer- 
gency medical technicians have traditionally prepared, WMD attacks 
present dramatic new challenges to state and local law enforcement. Not 
only do they need detection capabilities, protective equipment, decon- 
tamination equipment, and the plans and training to use them, but they 
must also be prepared to enter scenes in which criminal evidence, sec- 
ondary explosive devices and booby traps, and even resisting terrorists 
may be found. The capabilities now recommended for law enforcement 
officers have stretched the resources of many jurisdictions. 1 


First, law enforcement must be able to identify a WMD attack. This 
can be challenging given the range of potential WMD attacks and the 
general confusion of most emergency situations. In some cases, ter- 
rorist violence may not be initially suspected. Responders—equipped 
with handheld detection devices and/or decision support software in 
more advanced jurisdictions—must recognize “signs and symptoms” 
or “indicators and effects” quickly or face the prospect of becoming 
victims themselves. 


Once a WMD attack has been confirmed, officers must take action to 
protect themselves and those on the scene. This may require donning 
PPE, which if done improperly can lead to contamination and if done 
correctly causes an immediate decrease in mobility, visibility, and 
effectiveness. 

An important step is to identify the hot zone, where the greatest 
danger exists; the cold zone, a safe area often downwind and down- 
grade where the weapon is not present; and the warm zone, where 
decontamination can occur. 


Communicating the existence of a WMD attack as rapidly as possible 
is critical to successful response. Responders must know how to com- 
municate, what to communicate, and to whom to communicate. They 
must also understand the procedures for establishing incident com- 
mand (see Chapter 14). 
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The nature of WMD attacks, including the potential of continued 
lethality and dispersion of agents to other locations, demands imme- 
diate and tight control of the scene. Law enforcement personnel need 
to establish perimeters, command posts, staging areas, medical mon- 
itoring stations, and isolation zones. They must also establish an 
immediate and effective media management operation. 


While all this is going on, those on the scene may need to address 
other components of the attack, such as secondary devices, bombs 
timed to go off after responders gather at the scene. 


In order to allow investigation and prosecution of the terrorists, plus 
preserve valuable intelligence information, responders must be able 
to recognize, protect, and collect evidence—from footprints to 
weapons containers—to the greatest extent possible while saving 
lives and preserving public safety and order. 

Officials must be prepared with detailed plans to initiate “shelter in 
place” orders or evacuations. Aside from the normal emergency man- 
agement component of such decisions, officials must be prepared to 
deal with crowds or disobedience of public safety directives. 

Should a major nuclear, chemical, or biological attack occur, the 
challenge to public order may be significant and panic may pose the 
risk of additional loss of life. 


While recovery is not typically considered part of counterterrorism, 
state and local officials will be required to address the health, eco- 
nomic, social, logistical, and other dimensions of an attack long after 
it occurs. This also includes critiques of their response to gain lessons 
learned that may help prevent or respond to future attacks. 


CHAPTER SUMMARY 


No longer can state and local officials leave the defense of their com- 
munities to the federal government. Their role in homeland security 
is now increasingly recognized by the federal government and the 
voting public. In many areas, officials are taking aggressive new 
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measures to combat terrorism, especially by counterterrorism strate- 
gies. Their challenge is accomplishing this critical mission with lim- 
ited resources, virtually unlimited vulnerabilities, and the need to 
protect the civil liberties of citizens while rooting out the terrorists 
who may be hiding among them. 


CHAPTER QUIZ 


1. Explain why state and local agencies have a key role in counter- 
terrorism. 


2. What is a data fusion center? 
3. List two components of the risk management model. 


4. Provide examples of organized crime activities linked to terror- 
ism funding. 


5. What are three skills law enforcement need at a WMD scene? 
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CRITICAL INFRASTRUCTURE 
PROTECTION AND KEY ASSETS 


Protecting America’s 
Most Important Targets 


It is important to learn from the events of September 11. We now know that 
the symbols of our nation may be the targets of terrorist’s plots. 


Senator Arlen Spector 


CHAPTER OVERVIEW 


This chapter discusses the important roles of sector coordinating 
councils, information-sharing and analysis centers, and risk manage- 
ment in determining how to apply scarce resources to the challenges 
of protecting the nation’s lifeblood—its vital economic and cultural 
centers. It also outlines the critical infrastructure sectors and key 
assets identified by the federal government. It addresses government 
and private-sector responsibilities, key concerns that have to be 
addressed, and ongoing initiatives to improve security. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Define critical infrastructure. 
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2. Describe the importance of information-sharing and analysis 
centers. 


3. Understand the role of risk management in critical infrastructure 
protection. 


Identify key concerns for protecting critical infrastructure. 


Understand the roles and responsibilities for protecting 
critical infrastructure. 


LIFEBLOOD OF THE U.S. ECONOMY 


Concern over protecting the critical infrastructure of the United 
Stares from terrorists emerged long before the September 11 attacks. 
On May 22, 1998, President Bill Clinton issued Presidential Decision 
Directive (PDD) No. 63, which defined critical infrastructure as 
“those physical and cyber-based systems essential to the minimum 
operations of the economy and government.” This set up a frame- 
work for organizing activities including establishing lead federal 
agencies to liaison with representatives of different private sectors; 
establishing interagency coordination on critical infrastructure mat- 
ters; and assigning responsibility to federal agencies for protecting 
their own critical assets. Perhaps most importantly, the PDD reaf- 
firmed the primacy of private-sector responsibilities for protecting 
commercial assets and established information-sharing and analysis 
centers (ISACs) for sharing information between the public and pri- 
vate sectors. 

The September 11 attacks did much to expand the scope of 
national critical infrastructure protection initiatives. In some cases, 
specific acts were passed to immediately improve airline and mar- 
itime transportation security and strengthen the protection of the 
nation’s food supply. In addition, national strategies specifically 
identified critical infrastructure and key asset protection as a critical 
mission area for homeland security. A directorate was also estab- 
lished within the Homeland Security Department with specific 
responsibilities for assessing the risks and vulnerabilities of national 
critical infrastructure. 
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FROM THE SOURCE: 
PRESIDENTIAL DIRECTIVE 


On December 17, 2004, President Bush issued HSPD 7, which 
established U.S. policy regarding critical infrastructure and key 
assets. 


Excerpt from the Directive 
Purpose 


1. This directive establishes a national policy for Federal 
departments and agencies to identify and prioritize 
United States critical infrastructure and key resources 
and to protect them from terrorist attacks. 


Background 


2. Terrorists seek to destroy, incapacitate, or exploit critical 
infrastructure and key resources across the United States 
to threaten national security, cause mass casualties, 
weaken our economy, and damage public morale and 
confidence. 


3. America’s open and technologically complex society 
includes a wide array of critical infrastructure and key 
resources that are potential terrorist targets. The majority 
of these are owned and operated by the private sector 
and State or local governments. These critical infrastruc- 
tures and key resources are both physical and cyber- 
based and span all sectors of the economy. 


4. Critical infrastructure and key resources provide the 
essential services that underpin American society. The 
Nation possesses numerous key resources, whose 
exploitation or destruction by terrorists could cause cata- 
strophic health effects or mass casualties comparable to 
those from the use of a weapon of mass destruction, or 
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could profoundly affect our national prestige and morale. 
In addition, there is critical infrastructure so vital that its 
incapacitation, exploitation, or destruction, through ter- 
rorist attack, could have a debilitating effect on security 
and economic well-being. 


5. While it is not possible to protect or eliminate the vul- 
nerability of all critical infrastructure and key resources 
throughout the country, strategic improvements in secu- 
rity can make it more difficult for attacks to succeed and 
can lessen the impact of attacks that may occur. In addi- 
tion to strategic security enhancements, tactical security 
improvements can be rapidly implemented to deter, miti- 
gate, or neutralize potential attacks. 


MEANS FOR PROTECTING 
CRITICAL INFRASTRUCTURE 


National efforts to ensure the protection of critical infrastructure and 
key assets against terrorist attacks center on coordinating public and 
private policies, sharing information, and risk-based planning. The 
cornerstone of these efforts is sector coordinating councils, information- 
sharing and analysis centers, and risk management. 


These councils, which are to be established by representatives of the 
private sector, serve as the government’s point of entry for coordinat- 
ing infrastructure protection activities and issues. Sector coordinating 
council activities include efforts such as sectorwide planning, devel- 
opment of best practices, promulgation of programs and plans, devel- 
opment of requirements for effective information sharing, research 
and development, and cross-sector coordination. 


Information-sharing and analysis centers (ISACs) are one of the 
primary means of promoting communications and threat warnings 
across public-private stakeholders. First called for in PDD 63 in 
May 1998, ISACs are voluntary organizations formed by various 
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Risk 
Management 


critical infrastructure sectors. Currently, 15 ISACs are in operation 
or in the process of being established. They include chemical, elec- 
tricity, energy, emergency management and response, financial 
services, food, information technology, telecommunications, 
research and education, multistate government operations, public 
transit, surface transportation, highway, water, and real estate. (See 
Figure 14.1.) 

The structure, operations, and level of activity among ISACs vary 
significantly. The basic ISAC model, however, usually finds the cen- 
ter managed and operated by a private organization. In many cases, 
an industry association has assumed responsibility for managing an 
ISAC or providing personnel and facilities to support its operations. 
The American Chemistry Council, for example operates the ISCA for 
its sector through CHEMTRAC, a 24-hour communications center 
run by the council to provide technical assistance for dealing with 
emergencies related to the distribution of chemicals. Some ISACs 
employ contractors to perform the day-to-day operations at their cen- 
ters. The centers are funded through a variety of methods including 
association dues, fee-for-service, federal grants, and voluntary contri- 
butions. ISACs employ a variety of means for sharing information 
including Web sites, meetings and conferences, e-mails, faxes, and 
conference calls. Some ISACs maintain formal alert warning systems. 


Many of the activities related to developing and implementing criti- 
cal infrastructure protection measures are derived from employing 
risk management techniques. Risk management incorporates con- 
ducting threat and vulnerability assessments. These assessments 
identify potential security weaknesses and the likelihood that terror- 
ists will exploit them. Based on this analysis, priorities are established 
for reducing risks by adopting measures to prevent, recover from, or 
mitigate the effects of a terrorist attack. 

Effective strategies depend on careful cost-benefit analysis; there 
are not enough resources to waste money on programs that don’t 
work or targets that do not merit protection. 

Jurisdictions often attempt to prioritize through the use of risk 
management models. There is no commonly accepted risk-manage- 
ment methodology in either the government or the private sector. A 
common one, however, has five steps. 
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Asset Assessment 


This step focuses on identifying the assets that are most valuable, 
those targets whose destruction would have the worst consequences. 
These potential targets might be people, facilities, or infrastructures— 
including computer networks. Consequences could include physical 
damage, such as the release of hazardous fumes from a destroyed 
chemical plant, or psychological, such as the assassination of a key 
leader or celebrity. Some jurisdictions use a “target value assessment” 
process to determine the damage that would be caused by the destruc- 
tion of various assets. 


Threat Assessment 


This step entails determining who would want to attack certain tar- 
gets and how these attacks might be undertaken. A good threat 
assessment includes analysis of the organization, its people, and its 
facility to assess whether any of these elements might be seen as 
social, cultural, or economic icons whose destruction would serve ter- 
rorist goals. The priority placed by the terrorists in attacking specific 
types of targets is also considered in this step. Analysis of terrorist 
strategies and intelligence on their planned activities is also a critical 
component of the threat assessment. 


Vulnerability Assessment 


During this process, planners determine security vulnerabilities in 
targets, trying to gauge how open they are to attack. Additionally, this 
assessment considers the likely consequences of a successful attack 
including potential casualties, physical destruction, and psychologi- 
cal consequences. 


Risk Assessment 


Combining and weighing the asset, threat, and vulnerability assess- 
ments produces a risk assessment. A target that has a high asset value, 
is threatened by terrorists, and is vulnerable merits protection. 


Identification of Countermeasures 


Once key potential targets are identified, planners can determine 
countermeasures to reduce the risks. Countermeasures should be 
evaluated for cost-effectiveness. These measures could be preemptive 
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efforts to minimize threats, protection initiatives to lessen the danger 
of a successful strike, mitigation precautions to minimize disruptions 
or limit damage caused by an attack, and recovery efforts to ensure 
the rapid restoration of service after an attack. 


TYPES OF CRITICAL INFRASTRUCTURE 


U.S. critical infrastructure is defined by Homeland Security 
Presidential Directive 7.! The critical infrastructure of the United States 
is vast in scope and complexity including 2,800 power plants, 5,800 
hospitals, 66,000 chemical plants, 120,000 miles of railroads, two mil- 
lion miles of pipeline, in addition to many other facilities. Critical infra- 
structure assets consist of people, physical assets, and information 
systems. Additionally, much of the national critical infrastructure is 
interdependent. In other words, the operation of one sector is depend- 
ent or related to the functioning of another. For example, the operations 
of many sectors depend on reliable energy supplies. In turn, power 
plants rely on transportation assets to deliver the fuel that drives the 
power plants. 

Critical infrastructure assets are defined by three characteristics. 
The first is the production of essential goods and services. This 
includes sectors such as food and water production, public health, 
and emergency services. Also included in this category are sectors 
that sustain the U.S. economy including energy, transportation, and 
banking and financial services. A second category is assets that pro- 
vide essential interconnectedness and operability among various sec- 
tors including information and telecommunications and postal 
services. Third, critical infrastructure also comprises sectors that are 
essential for public safety and security including public health, emer- 
gency services, the defense industrial base, and government. 


The agriculture and food sector includes the supply chains for feed, 
animals, and animal products; crop production and the supply chains 
for seed, fertilizer, and related materials; and the postharvesting com- 
ponents of the food supply from processing, production, and packag- 
ing through distribution to retail sales, food service, and home 
consumption. 
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Concerns 


The greatest threat to the agricultural sector is disease and contami- 
nation of the food supply. Even without the threat of terrorism, food- 
borne disease causes on average 76 million illnesses each year, 
325,000 hospitalizations, and 5,000 deaths, creating an economic cost 
that by some estimates ranges up to $32 billion.? Biological dangers 
can threaten plants and animals as well as people. Crop and livestock 
losses from contamination by mycotoxins (toxins produced by fungi) 
alone cost the United States on average $932 million. Humans can 
also be exposed to a range of deadly or debilitating toxins by ingest- 
ing contaminated plant and animal products, or less frequently by 
contact or inhalation. Improper storage, poor sanitation, and cross- 
contamination during the production, transportation, processing, or 
storage of medicine, food supplies, or other consumables can further 
spread toxins or biological agents. For instance, in 1984, the 
Rajneeshee cult contaminated local salad bars in an Oregon town 
with salmonella, demonstrating the ease of conducting small-scale, 
indiscriminate terrorist attacks.“ 

Protecting the food supply from production to delivery in super- 
markets and restaurants is an ongoing challenge. The responsibility 
for securing the food supply chain is divided among federal, state, 
and local authorities. The Public Health Security and Bioterrorism 
Preparedness and Response Act of 2002 called for a number of addi- 
tional measures to strengthen protection of the food supply, includ- 
ing hiring additional inspectors, creating a registry of products 
manufactured abroad, increasing research and development, adding 
reporting requirements, and instituting new legal penalties and pro- 
hibitions.° 


Initiatives 


Planned enhancements include a complete review of risks in the 
agriculture and food sector by the DHS and the Department of 
Agriculture in conjunction with state and local governments and 
industry. Additionally, the Department of Agriculture is working 
on enhancing detection and testing capabilities and identifying 
incentives to encourage private-sector initiatives, as well as devel- 
oping emergency response strategies specifically for the agricul- 
tural sector. 
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The nation’s critical water infrastructure includes systems for deliv- 
ering fresh water and wastewater collection and management. 
Facilities that comprise these systems include reservoirs, wells, 
aquifers, treatment facilities, pumping stations, aqueducts, pipelines, 
storm water systems, and sewer lines. 


Concerns 


Concerns in this sector include the physical protection of assets includ- 
ing toxic chemicals used in water treatment, cyberattacks on the super- 
visory control and data acquisition (SCADA) systems that control 
water systems, disruption of services, and contamination of water sup- 
plies. Addressing all the possible means of threatening the U.S. water 
supply could be a serious fiscal challenge. Aging U.S. water systems 
could require over $500 billion in improvements, which if not pro- 
vided, could leave them vulnerable to attack. Although contamination 
of water supplies attracts the most public concern, this threat is perhaps 
the least likely. 


Initiatives 


Currently, the Environmental Protection Agency and the DHS are 
jointly undertaking a national vulnerability and threat assessment of the 
water supply. This initiative includes identifying the highest-priority 
vulnerabilities and improving site security at high-threat locations and 
enhancing nationwide monitoring and sharing of information as well as 
integrating cross-sector response plans, particularly with the energy, 
chemical industry, and information and telecommunications sectors 
(see Figure 14.2). 


The public health sector consists of state and local health departments, 
hospitals, health clinics, mental health facilities, laboratories, mortuaries, 
pharmacies, and pharmaceutical stockpiles. The term public health sector 
is in part perhaps misleading. Significant portions of the public health 
sector are in private hands. For example, the overwhelming percentage 
of U.S. ambulance services is provided by commercial companies. 


Concerns 


Concerns in the public health sector are the protection of health 
facilities against physical attack, their great dependence on other crit- 
ical infrastructure systems such as energy and information and 
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FIGURE 14.2 


FEDERAL GOVERNMENT ORGANIZATION 
TO PROTECT CRITICAL INFRASTRUCTURE AND KEY ASSETS 


President 


Secretary of Homeland Security 
Federal, state, local, and private sector coordination and integration 
Comprehensive national infrastructure protection plan 
Mapping threats to vulnerabilities and issuing warnings 


Sector Lead Agency 
Agriculture Department of Agriculture 
Food: 
Meat and poultry Department of Agriculture 
All other food products Department of Health 
and Human Services 
Water Environmental Protection Agency 
Public Health Department of Health 


Emergency Services 


Government: 
Continuity of government 
Continuity of operations 


Defense Industrial Base 

Information and Telecommunications 
Energy 

Transportation 

Banking and Finance 


Chemical Industry 
and Hazardous Materials 


Postal and Shipping 
National Monuments and Icons 


and Human Services 
Department of Homeland Security 


Department of Homeland Security 
All departments and agencies 


Department of Defense 
Department of Homeland Security 
Department of Energy 

Department of Homeland Security* 
Department of the Treasury 
Environmental Protection Agency 


Department of Homeland Security 
Department of the Interior 


* Under the Homeland Security Act of 2002, the Transportation Security Administration, 
responsible for securing our Nation’s transportation systems, will become part of the 
Department of Homeland Security. The new department will coordinate closely with the 
Department of Transportation, which will remain responsible for transportation safety. 
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telecommunications, and protection against spread of contamination 
from contaminated patients or health care workers. The control and 
protection of facilities may be the greatest challenge since medical 
centers are, by design, intended to be accessible. 

Perhaps the greatest challenge in maintaining infrastructure over 
the long term will be the fiscal strains on the health care system. The 
advantages provided by any initiatives in public health prepared- 
ness could be overwhelmed by declines in the national health care 
structure driven by such factors as an increasingly aging population, 
the rising numbers of medically uninsured, and the cost of prescrip- 
tion drugs. The economic resources required to meet the nation’s 
health needs are expected to rise from 14 to 16.8 percent of GDP by 
2010.6 Many states are already forecasting that future increases in 
Medicare and Medicaid costs could place an enormous strain on their 
budgets. Critical infrastructure will be of little use if the medical sys- 
tem lacks sufficient emergency medical technicians, doctors, nurses, 
and hospital facilities.” 


Initiatives 


Among the most vigorous ongoing initiatives being pursued are 
efforts to enhance the national capacity to respond to disasters— 
being able to quickly identify a crisis and surge response assets to 
meet critical medical challenges. Ongoing initiatives include efforts to 
enhance biomedical surveillance and communications capabilities, 
protecting emergency stockpiles of medical supplies, strengthening 
national disaster medical systems, and exploring options for provid- 
ing incentives to the private sector to encourage improvement of the 
physical security of the medical infrastructure. 


Critical infrastructure supporting emergency services consists of fire, 
rescue, medical, and law enforcement organizations. These include 
both personnel and facilities. Emergency services are provided by 
federal, state, and local governments, as well as commercial firms and 
volunteer organizations. 


Concerns 


Among the greatest concerns for protecting emergency services is 
the potential for service providers or facilities to themselves become 
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targets of terrorist attacks. One distinction between responding to 
deliberate attacks and responding to natural or technological disas- 
ters is that in order to exacerbate physical and psychological casual- 
ties, terrorists may deliberately target emergency response 
capabilities. 

Terrorists could well use secondary devices specifically intended to 
harm first responders and civilian onlookers. Explosives are com- 
monly used for this purpose, but other weapons might be employed 
as well. Employing small amounts of various chemical, biological, 
toxin, or radiological agents in the ancillary strikes against first 
responders might further confuse a coordinated response. 

Follow-on terrorist strikes may not be limited to the initial attack 
site. To complicate consequence management, attacks might be 
launched at hospitals, police stations, and emergency operations cen- 
ters. Many state and city emergency operations centers are particu- 
larly vulnerable. Often, they lack physical security protection and 
redundant communications. Backup centers and mobile command 
posts usually do not exist.’ 

Another critical factor affecting the safety and capacity of emergency 
services to effectively respond at a disaster site is the state of interoper- 
able communications. The lack of means to share information across 
the different systems used by responders has long been a barrier to 
effective interagency communications. In a typical metropolitan area, 
public safety agencies operate over frequencies ranging from VHF to 
UHF, 800 MHz, and low bands. It is not uncommon for responders 
from the same jurisdiction to have difficulty communicating at the 
scene of an incident or request neighboring jurisdictions to provide 
assistance. 


Initiatives 


Initiatives for strengthening the emergency service sector include 
developing programs to enhance interoperable and redundant com- 
munications networks and instituting a more robust national emer- 
gency preparedness exercise program to promote consistent 
protection planning and response protocols and encourage lesson 
learning and the sharing of best practices. Additionally, the DHS is 
strengthening mutual aid agreements among local communities so 
the communities can effectively share resources during a crisis. 
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Private-sector defense industries provide critical capabilities that are 
essential for the mobilization and deployment of military forces. 
These include manufacturing ammunition and equipment, as well as 
a range of support services. 


Concerns 


Market competition and consolidation have reduced or eliminated 
redundant sources for some critical products and services. In some 
cases, an individual vendor is the only supplier in the world capable of 
satisfying a unique requirement. In other cases, defense industries use 
so many subcontractors and suppliers that they are unable to map their 
supply chains and identify critical sources of supplies and services. 

Protecting critical infrastructure that could be a bottleneck in the 
ability of the United States to project military power is a significant 
concern. As an example, the overwhelming bulk of American mili- 
tary power moves by ship. Most military supplies and hardware 
ship out from just 17 seaports. Only four of these ports are desig- 
nated specifically for the shipment of arms, ammunition, and mili- 
tary units.!? During the height of a foreign crisis, attacks could 
interfere with port operations and limit the access of combat forces 
to overseas theaters by preventing them from leaving the United 
States. 


Initiatives 


Coordination of defense industrial activities is largely the responsi- 
bility of the Department of Defense (with the exception that the 
Department of Energy is responsible for the security of infrastructure 
used in the production and maintenance of nuclear weapons). The 
Defense Department’s main efforts center on including critical infra- 
structure protection requirements in contract processes; incorporat- 
ing security concerns in defense-related commercial production and 
distribution processes; and improving information sharing between 
defense organizations and the private sector. 


This sector provides voice and data services through a complex public- 
private network comprising the Public Switch Telecommunications 
Network (PTSN), the Internet, and private enterprise networks. The 
PTSN includes a vast array of physical infrastructures including two bil- 
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lion miles of communications cables, 20,000 switches, access tandems, 
and other equipment, as well as cellular, microwave, and satellite tech- 
nologies that provide access to mobile users. Internet service providers 
(ISPs) interconnect with the PTSN through points of presence (POPs), 
usually switches and routers. In addition, private enterprises have addi- 
tional proprietary and leased telecommunication assets." 


Concerns 


The challenge for telecommunications carriers is to balance the prior- 
ities of providing reliable service, cost, security, and privacy. One of 
the greatest difficulties is reaching a shared appreciation of acceptable 
risks among public and private stakeholders. Another concern is the 
cascading effects of attacks on communications systems, which might 
spread to other critical infrastructure sectors. For example, crippling 
telecommunications could greatly limit responders’ capacities to 
effectively coordinate emergency services. 

Terrorists, for example, might attempt to jam telecommunications 
systems to interfere with emergency service providers responding to a 
disaster. The technology for conducting electromagnetic jamming—the 
ability to interfere with radio, radar, television, and telecommunications 
signals—has been available for some time. Jamming is accomplished by 
broadcasting electromagnetic radiation on certain frequencies in order 
to create sufficient interference to prevent legitimate transmissions. It 
can also employ different tactics from intermittent jamming designed to 
make it appear that targeted systems are simply not operating properly 
or constant jamming to prevent the use of equipment altogether.’ 


Initiatives 


Ongoing telecommunications sector initiatives include an effort by 
the DHS to map the overall national communications architecture, 
identify the most critical nodes, and then develop strategies to 
address security and reliability issues. Greater effort is also being 
made to coordinate with key allies and trading partners to address 
international communications issues. 


The production and transmission of electricity, oil, and natural gas 
comprise the energy sector. The infrastructures in this sector includes 
production platforms, processing, and refining facilities; terminals 
and bulk storage stations; nuclear, coal, and oil-fired power plants; 
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and transmission, distribution, and control and communications sys- 
tems. Pipelines, which might carry oil or natural gas are considered 
components of the transportation sector. 


Challenges in the energy sector center on its sprawling, complex, 
and interdependent infrastructure. The business configuration of the 
sector also presents obstacles to implementing security initiatives. 
Competition, structural changes, and regulatory regimes signifi- 
cantly affect the sectors capacity and requirements to upgrade secu- 
rity and complicate efforts to fix responsibilities and create 
incentives to improve security. 

There are many assets in the energy sector that remain exposed to 
terrorist strikes. In some cases, disrupting a few critical nodes would 
have a significant effect on national energy production. For example, 
offshore oil platforms are especially vulnerable. Most of the oil 
extracted from the Gulf of Mexico is routed through a handful of off- 
shore pumping stations. Bombing several key pumping stations 
could lead to serious economic disruption. 1? 


Initiatives 


Among the current national efforts to enhance the resilience of energy 
critical infrastructure is an effort by the DHS and the Department of 
Energy to inventory replacement and repair equipment and compo- 
nents and then identify means to speed restoration and recovery of 
services. There are also ongoing efforts to define consistent criteria for 
risk and vulnerability assessments and guidelines for physical secu- 
rity programs. 


This sector consists of all major national transportation nodes includ- 
ing aviation, maritime traffic, rail, pipelines, highways, trucking and 
busing, and public mass transit. Transportation assets are among the 
most diverse and robust of all the critical infrastructure sectors. 


Concerns 

Despite the vast capabilities of the transportation sector significant 
concerns remain. Many critical sectors are dependent upon the trans- 
portation sector, and disruptions can have a significant rippling effect 
throughout the economy. Moreover, al-Qaida has shown significant 
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interest in attacking transportation assets. In addition to hijacking 
and attempting to blow up airplanes, its operatives have also 
explored attacking airports, bridges, tunnels, and railways. 

Attacks against transportation assets could range from explosive 
devices, the most commonly used terrorist weapon, to new innova- 
tive threats. Of particular concern is the vulnerability of commercial 
aircraft to military shoulder-fired air defense weapons that might be 
obtained by terrorists.'t No such attack in the United States has ever 
been confirmed.! However, shoulder-fired weapons have been used 
against commercial aircraft in other countries. In November 2002, for 
example, an airliner taking off from Monbasa, Kenya,was unsuccess- 
fully fired on by terrorists with suspected links to al-Qaida.'® Figures 
for how many attacks have been conducted vary, but there have likely 
been dozens of attempted attacks (mostly in areas of ongoing armed 
conflict), including successful strikes that claimed several hundred 
lives. For years, official studies of airline vulnerabilities have recog- 
nized that these weapons could pose a serious threat to U.S. aircraft.!” 


Initiatives 


Major national programs in the transportation sector have been tai- 
lored to meet the unique needs of various nodes. New security initia- 
tives in aviation center on implementation of the congressional 
legislation and researching options for protecting commercial airliners 
from shoulder-fired missiles. Similarly, the emphasis for improving 
maritime security has been on meeting the requirements established in 
post-9/11 legislation. Efforts in rail and mass transit security have cen- 
tered on establishing national security practice standards. Likewise, 
developing standard protocols, practices, and guidelines has been the 
major focus in improving security for other forms of public transport. 
Research and development of new technologies for screening contain- 
ers, baggage, and passengers has also been a priority. 


The banking and financial services sector comprises retail and whole- 
sale banking operations, financial markets, regulatory institutions, 
and repositories of documents and financial assets. Of particular con- 
cern is infrastructure that supports electronic financial services includ- 
ing computers and telecommunications networks. Also considered 
vital are financial services employees with highly specialized skills. 
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Concerns 


Disruptions in this sector not only have the potential to disrupt finan- 
cial activities, but also inflict significant rippling effects across the 
nation and the world including shaking public confidence. The 
September 11 attacks, for example, resulted in the longest closure of 
stock markets since the 1930s. The strikes demonstrated the vulnera- 
bility of financial institutions to wide-scale disruption.'® 


Initiatives 


Currently, the Department of the Treasury is leading a sectorwide risk 
review. In addition, the department, in conjunction with the DHS, has 
established a national working group to address the challenges aris- 
ing from the financial sector’s dependency on information and 
telecommunications systems. 


The nation’s chemical sector provides products that are vital to virtually 
every sector of economic activity. Chemical manufacturing includes pro- 
ducing everything from fertilizer to medicines. In fact, the chemical sector 
is perhaps the most diverse with respect to size, geographic dispersion, 
and range of commercial activities conducted by different companies. 


Concerns 


Enhancing security across such a diverse and complex infrastructure 
could be extraordinarily expensive. Many companies lack even mini- 
mal security measures. Where precautions have been taken in the 
past they were primarily concerned with safety and environmental 
issues and gave scant attention to the prospects of deliberate sabo- 
tage. At the same time, many components of the sector operate on 
very slim profit margins. As a result, no single security blueprint 
would likely be practical to address the appropriate measures that 
should or could be taken by all chemical facilities. 

Of greatest concern within this sector is the potential for chemical 
releases that could endanger a large number of lives. The most likely 
dangerous agents that could be released would be either toxic chem- 
icals or flammable substances. Of the two, toxic chemicals could be 
potentially the more dangerous since they tend to represent a greater 
downwind hazard. Anhydrous ammonia and chlorine are the most 
widely used industrial chemicals that might be the target of a sabo- 
tage effort. Both can represent substantial vapor hazards. For 
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instance, most chlorine in the United States is transported in 90-ton 
railcars. The downwind hazard for a release from a railcar in an urban 
setting is 22.5 kilometers.’ The gas plume could kill outright any 
exposed individual up to six kilometers away and inflict permanent 
lung damage on those further downwind. 

On the other hand, while flammable substances present less of a 
vapor hazard, they can still represent a substantial danger. For exam- 
ple, in 1989, a massive release of isobutene, ethylene, hexane, and 
hydrogen from a Phillips 66 chemical plant in Houston ignited in a 
fireball that exploded with a force of 2.3 kilotons. The disaster killed 
23 and injured 130, leaving $750 million in damage at the plant and 
hurling debris 9.5 kilometers into neighboring communities.” 


Initiatives 


The current authorities provided to the Environmental Protection 
Agency to oversee the chemical industry are probably inadequate to 
meet homeland security needs. Thus, new legislation in this area is 
likely. In the meantime, current initiatives focus on improving infor- 
mation sharing, particularly with regard to threats. 


ISSUES: 
WHIFF OF DANGER 


One of the most controversial areas for improving security relates 
to chemical and hazardous material facilities. In 2003 Senators 
James Inhofe (R-OK) and Zell Miller (D-GA) introduced the 
Chemical Facilities Security Act of 2003. The Inhofe bill called for 


e Requiring companies to conduct vulnerability assessments 
and security plans. 

e Authorizing the secretary of homeland security to require 
plant owners and operators to revise their plans and 
assessments to ensure adequate safety and protection. 

e Allowing other agencies, including the Environmental 
Protection Agency (EPA), to provide the DHS with technical 
support. 
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¢ Requiring the DHS to perform routine oversight of facili- 
ties to ensure compliance with the law. 


e Authorizing the secretary of the DHS to petition the 
courts for injunction relief in cases where companies fail 
to comply, which in practice could temporarily shut 
down a facility. 


e Allowing the secretary of the DHS to impose civil penal- 
ties of $50,000 a day for each day a violation occurs and 
administrative penalties of up to $250,000. 


A competing bill, The Chemical Security Act, was introduced 
by Senator Jon Corzine (D-NJ). The Corzine bill would require 
the EPA and DHS to identify high-priority chemical plants and 
develop regulations to require these high-priority chemical plants 
to conduct vulnerability assessments and to implement response 
plans that include security improvements and safer technologies. 

Neither bill was approved during the legislative year. 


e Do the two bills represent different approaches to protect- 
ing critical infrastructure? If so, how? 


e Which bill is more consistent with current national 
strategies? 


e Which bill offers a better approach to improving security? 


The U.S. postal system services more that 137 million addresses 
nationwide. The supporting infrastructure comprises almost 750,000 
personnel and tens of thousands of facilities. Disruption of mail serv- 
ice could have a significant effect on economic activity. It might also 
have significant psychological effects increasing anxiety and appre- 
hension. 


Concerns 


Challenges in the postal services not only include ensuring reliable 
maintenance of service and providing security for facilities, but 
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also protecting employees. The 2001 anthrax attacks that inadver- 
tently contaminated and killed two postal workers underscored this 
concern. Numerous points of entry into the mail system and the fact 
that the postal service does not always maintain custody of mail 
throughout the delivery process complicates the task of preventing 
attacks like the anthrax letters. The postal service must also be con- 
cerned about ensuring that constitutional rights of U.S. citizens 
(such as the rights to privacy and free speech) are not abridged by 
security procedures. 


Initiatives 


The U.S. Postal Service has several ongoing initiatives to improve 
security. These efforts include improving emergency response plans, 
adopting new health-risk reduction measures, and adopting new 
technologies to screen, identify, decontaminate, and investigate sus- 
picious mail. 


In addition to establishing critical sectors of the U.S. economy that 
must be protected from terrorist attack, national strategies identified 
several categories of key assets, specific facilities of critical impor- 
tance. These include national monuments and icons, nuclear power 
plants, dams, government facilities, and key commercial assets 
(such as high-rise office buildings). Key assets represent facilities of 
high strategic value (like the Pentagon) or economic importance 
(such as the New York Exchange). A successful attack on any of these 
assets could result in catastrophic damage (e.g., dams and nuclear 
power plants) or significantly impact national prestige, morale, and 
confidence. 

As with other aspects of critical infrastructure, key assets belong to 
a polyglot of federal, state, local community, and private entities. 
Federal agencies are responsible for securing their own key assets. 
For example, the Department of the Interior has oversight of national 
monuments. In addition, lead federal agencies have been assigned 
responsibility for coordinating security activities for various cate- 
gories of key assets. The Nuclear Regulatory Commission, for exam- 
ple, is responsible for overseeing the security of commercial nuclear 
power plants. 
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Protecting critical infrastructure and key assets is vital to the security 
of the United States. While initiatives are ongoing to better secure key 
infrastructures from terrorist attacks, significant concerns remain in 
all areas. Since most critical infrastructures are in private hands, pub- 
lic-private cooperation is essential. Effective coordination of policies 
and practices through the sector coordinating councils and better 
communications through the ISACs are important parts of that effort. 
Risk management is also a critical tool for determining how to apply 
scarce resources to the challenge of protecting critical infrastructure. 


CHAPTER QUIZ 


1. How does the government determine what are critical infra- 
structure and key assets? 


2. What do you think is the most significant vulnerability? 


3. How should the balance of government and private-sector 
responsibilities be determined? 


4. What is an ISAC, and how does it work? 
5. Describe the steps in risk management. 
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CHAPTER 


I 


INCIDENT MANAGEMENT AND 
EMERGENCY MANAGEMENT 


Preparing for When Prevention Fails 


We're in uncharted territory. 


New York Mayor Rudolph Giuliani to 
Police Commissioner Bernard Kerik 
at the World Trade Center Site, September 11 


CHAPTER OVERVIEW 


This chapter outlines the roles and responsibilities of federal, state, 
local, and tribal agencies in responding to a terrorist attack. It 
addresses the all-hazards approach to planning for and responding to 
all kinds of disasters, including acts of terrorism. In particular, the 
chapter outlines the guidance provided in the National Response 
Plan and the National Incident Management System. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Understand the key concepts in the National Response Plan. 
2. Define what is meant by an all-hazards approach. 
3. Describe the incident management system. 
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4. Describe the principles and components of emergency man- 
agement. 


5. Understand future requirements for improving the national 
response system. 


THINKING... AND 
EXPERIENCING THE UNTHINKABLE 


On the morning of September 11, 2001, New York City was the most 
prepared city in the nation. City leaders had spent four years 
rewriting plans and revamping emergency response procedures. A 
swath of local, state, and federal representatives was invited to 
coordination meetings. The city’s emergency planning office held 
drills and training exercises with high-ranking officials, including 
the mayor.! But it was not enough. On the day of the incident, lack 
of communications and coordination made it impossible to estab- 
lish unified command at the scene. The city’s Office of Emergency 
Management headquarters on the 23rd floor of 7 World Trade 
Center had to be evacuated. After the collapse of the South Tower, 
officials ordered responders to abandon the North Tower. Not 
everyone got the word. At least one police officer, five Port 
Authority police officers, and 121 firefighters died when the second 
tower collapsed.” 


THE EMERGENCY RESPONSE CHALLENGE 


The heroic, but flawed, response to the September 11 attacks; efforts 
in the wake of natural disasters; and recent major counterterrorist 
training exercises suggest there is already enough known about the 
homeland security challenge to conclude that the national response 
system in place before 9/11 was inadequate to deal with a large- 
scale terrorist threat. In each case, three major shortfalls consis- 
tently emerge in preventing, protecting against, and responding to 
large-scale disasters, which can, in part, be addressed through 
improved planning and management. 
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Interagency 
Coordination 


Organization and 
Communication 


Operations are frequently plagued by a lack of information sharing 
and confusion over responsibilities among policy makers, law enforce- 
ment, emergency managers, first responders, public health workers, 
physicians, nonprofit organizations, and federal agencies. The neces- 
sity for speed can exacerbate the coordination challenge. Effectively 
negating threats in many cases requires a rapid response capability, 
and operating on compressed time lines leaves little room for miscues 
in coordination.* One significant requirement, for example, is quickly 
emplacing an incident response structure that can detect and assess 
threats and mobilize appropriate resources. In particular, for a chemi- 
cal or biological attack, actions taken in the first hours to identify, con- 
tain, and treat victims may significantly reduce the scope of casualties. 
Major exercises, however, are frequently marred by potentially crip- 
pling flaws. For example, during TOPOFF I (which stands for top offi- 
cials), the first of congressionally mandated “no-notice” exercises 
conducted to evaluate the federal response to a major strike, the Coast 
Guard asked for the assistance of the U.S. Marine Chemical and 
Biological Incident Response Forces (CBIRF). The Defense 
Department rejected the request, arguing that Federal Emergency 
Management Agency (FEMA), as lead response agency, was the only 
agency authorized to request department resources. This dispute 
delayed the CBIRF deployment by almost 24 hours.° Even determin- 
ing which agency is in charge can be a major problem. A National 
Capital Region exercise conducted in Washington, DC, in conjunction 
with TOPOFF simulated the explosion of a radiological dispersion 
device. Initially, hours were lost in confusion over whether the Energy 
Department or the EPA should lead the response.® 


Virtually every large-scale exercise or response experiences problems 
in agency notification; mobilization; information management; com- 
munication systems; and administrative and logistical support. 
Organizations have particular difficulty in optimizing flexibility and 
the capacity to decentralize operations and conduct rapid problem 
solving, often a key requirement for responding effectively to major 
disasters.’ Significant organizational deficiencies, such as failing to 
provide redundant capabilities or alternative means for responding 
to a crisis, are frequently not discovered until the onset of a major 
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operation. For example, when the New York City Emergency 
Operations Center was destroyed, the city had no adequate backup 
command and control capability available. It took three days to 
reconstitute all the functions and capabilities lost by the destruction 
of the emergency operations center.® 


Convergence is a phenomenon that occurs when people, goods, and 
services are spontaneously mobilized and sent into a disaster-stricken 
area.” Although convergence may have beneficial effects, like rushing 
resources to the scene of a crisis, it can also lead to congestion, put 
additional people at risk, create confusion, hinder the delivery of aid, 
compromise security, and waste scarce resources. This proved to be a 
major concern during the response to the September 11 attack on the 
World Trade Center. When the first tower was struck, firefighters, 
police officers, and emergency medical technicians from all over the 
metropolitan area streamed to the site, leaving other parts of the city 
vulnerable and, after the towers collapsed, creating tremendous prob- 
lems in accounting for emergency personnel. 

All these problems would be greatly exacerbated by the scale of a 
truly catastrophic attack requiring the mobilization of resources 
nationwide. Advanced planning, more funding, training, better com- 
munications systems, and operational experience can help address 
some of these challenges, but they alone are not sufficient preparation 
for catastrophic disasters. Welding resources and capabilities together 
requires an overall emergency management system. 


MANAGEMENT OF DOMESTIC INCIDENTS 


The U.S. system for dealing with the threat and aftermath of cata- 
strophic disasters continues to evolve in the wake of the September 11 
tragedies, but the basic framework of responsibilities remains 
unchanged from its pre-9/11 structure. Consistent with the dictates of 
federalism and the authorities in the U.S. Constitution the response 
for managing emergencies, including responding to terrorist threats, 
falls to local and state governments.'° Federal authorities provide 
assistance at the direction of the president when dangers exceed the 
capacity of local officials to deal with the problems and state or terri- 
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tory officials request federal assistance. Only in extreme cases of 
national emergency, such as insurrection, loss of the continuity of 
government, or to enforce federal laws does the president have the 
authority to assume command of response activities. 

Modifications to the national management of terrorist incidents 
and other disasters also builds on approaches and principles that 
have been in place for decades. The United States maintains a single 
system for dealing with all forms of hazards comprising standardized 
elements. 


FROM THE SOURCE: 
THE CHALLENGE OF COMMAND 


HSPD 5, issued in February 2003, defines federal responsibilities 
for responding to a terrorist attack. 


Excerpt from Homeland Security Presidential Directive 5 


(4) The Secretary of Homeland Security is the principal 
Federal official for domestic incident management. 
Pursuant to the Homeland Security Act of 2002, the 
Secretary is responsible for coordinating Federal opera- 
tions within the United States to prepare for, respond to, 
and recover from terrorist attacks, major disasters, and 
other emergencies. The Secretary shall coordinate the 
Federal Government's resources utilized in response to 
or recovery from terrorist attacks, major disasters, or 
other emergencies if and when any one of the following 
four conditions applies: (1) a Federal department or 
agency acting under its own authority has requested the 
assistance of the Secretary; (2) the resources of State and 
local authorities are overwhelmed and Federal assistance 
has been requested by the appropriate State and local 
authorities; (3) more than one Federal department or 
agency has become substantially involved in responding 
to the incident; or (4) the Secretary has been directed to 
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assume responsibility for managing the domestic inci- 
dent by the President. 


(5) Nothing in this directive alters, or impedes the ability to 
carry out, the authorities of Federal departments and 
agencies to perform their responsibilities under law. All 
Federal departments and agencies shall cooperate with 
the Secretary in the Secretary’s domestic incident man- 
agement role. 


(6) The Federal Government recognizes the roles and 
responsibilities of State and local authorities in domestic 
incident management. Initial responsibility for manag- 
ing domestic incidents generally falls on State and local 
authorities. The Federal Government will assist State 
and local authorities when their resources are over- 
whelmed, or when Federal interests are involved. The 
Secretary will coordinate with State and local govern- 
ments to ensure adequate planning, equipment, train- 
ing, and exercise activities. The Secretary will also 
provide assistance to State and local governments to 
develop all-hazards plans and capabilities, including 
those of greatest importance to the security of the 
United States, and will ensure that State, local, and 
Federal plans are compatible. 


(7) The Federal Government recognizes the role that the pri- 
vate and nongovernmental sectors play in preventing, 
preparing for, responding to, and recovering from terror- 
ist attacks, major disasters, and other emergencies. The 
Secretary will coordinate with the private and nongovern- 
mental sectors to ensure adequate planning, equipment, 
training, and exercise activities and to promote partner- 
ships to address incident management capabilities. 


(8) The Attorney General has lead responsibility for criminal 
investigations of terrorist acts or terrorist threats by indi- 
viduals or groups inside the United States, or directed at 
United States citizens or institutions abroad, where such 
acts are within the Federal criminal jurisdiction of the 
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United States, as well as for related intelligence collection 
activities within the United States, subject to the National 
Security Act of 1947 and other applicable law, Executive 
Order 12333, and Attorney General-approved procedures 
pursuant to that Executive Order. Generally acting 
through the Federal Bureau of Investigation, the Attorney 
General, in cooperation with other Federal departments 
and agencies engaged in activities to protect our national 
security, shall also coordinate the activities of the other 
members of the law enforcement community to detect, 
prevent, preempt, and disrupt terrorist attacks against the 
United States. Following a terrorist threat or an actual inci- 
dent that falls within the criminal jurisdiction of the 
United States, the full capabilities of the United States 
shall be dedicated, consistent with United States law and 
with activities of other Federal departments and agencies 
to protect our national security, to assisting the Attorney 
General to identify the perpetrators and bring them to jus- 
tice. The Attorney General and the Secretary shall establish 
appropriate relationships and mechanisms for cooperation 
and coordination between their two departments. 


Nothing in this directive impairs or otherwise affects the 
authority of the Secretary of Defense over the 
Department of Defense, including the chain of command 
for military forces from the President as Commander in 
Chief, to the Secretary of Defense, to the commander of 
military forces, or military command and control proce- 
dures. The Secretary of Defense shall provide military 
support to civil authorities for domestic incidents as 
directed by the President or when consistent with mili- 
tary readiness and appropriate under the circumstances 
and the law. The Secretary of Defense shall retain com- 
mand of military forces providing civil support. The 
Secretary of Defense and the Secretary shall establish 
appropriate relationships and mechanisms for coopera- 
tion and coordination between their two departments. 
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(10) The Secretary of State has the responsibility, consistent with 
other United States Government activities to protect our 
national security, to coordinate international activities 
related to the prevention, preparation, response, and recov- 
ery from a domestic incident, and for the protection of 
United States citizens and United States interests overseas. 
The Secretary of State and the Secretary shall establish 
appropriate relationships and mechanisms for cooperation 
and coordination between their two departments. 


THE ALL-HAZARDS APPROACH 


The term all hazards includes concern for both natural disasters and 
technological or human-made incidents. Natural disasters include 
floods, hurricanes, tornadoes, and earthquakes, while human-made 
incidents include inadvertent accidents, such as an industrial acci- 
dent, that result in an emergency situation, or deliberate acts, includ- 
ing terrorism. 

There is some debate among emergency response experts on the 
best means for planning to respond to the breadth of emergencies that 
could threaten the lives and property of Americans. Some argue for a 
“specific hazards approach,” developing unique plans, training, and 
equipment for responding to different kinds of disasters. They con- 
tend that a one-size-fits-all method may miss the crucial difference 
necessary for meeting different threats. For example, an earthquake 
and a nuclear bomb may both topple buildings and put streets to 
flame, but an earthquake will not present radiological hazards. 
Likewise, infectious disease and biological threats that are not conta- 
gious may require different responses since diseases may quickly 
spread beyond the initial victims of an attack. 

Additionally, there are concerns an all-hazards approach may 
divert too many resources to one kind of threat. Some fear that all- 
hazards preparedness will be used as an excuse for state and local 
governments to supplement normal public safety resources with fed- 
eral grants intended to strengthen antiterrorism measures. Others 
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Mitigation 


worry that obsessive concerns about terrorist threats could lead offi- 
cials to neglect preparedness for more common dangers like fire and 
floods. 

In contrast, an all-hazards approach argues that the initial response 
to all threats be based on a common framework because many events 
create similar dangers, though the cause of the incidents may vary. In 
short, they contend that the initial response in most cases will be the 
same. For example, regardless of the nature of the incident, officials 
will have to determine how to secure the area, actions that will be as 
important to protecting a potential crime scene (in the case of a ter- 
rorist attack) as they will be to ensuring the safety of victims, respon- 
ders, and bystanders. Advocates of an all-hazards approach contend 
that it is the most efficient means for preparing to respond to multi- 
ple dangers and simplifies the challenge of coordinating an inte- 
grated response among multiple agencies at the local, state, and 
federal level. 

FEMA has long supported an all-hazards approach to disaster 
management.!! After the agency was integrated into the Department 
of Homeland Security, the department adopted the FEMA approach 
as a guide to structuring national response efforts. In the wake of the 
September 11 disasters, however, there was wide recognition that 
after the initial response to an incident, a capability was required to 
adjust the response and the resources available to the specific needs 
of each disaster. Thus, national planning now emphasizes an all-haz- 
ards approach, but continues to develop supporting plans and capa- 
bilities to respond to unique threats, particularly those that might 
result from a terrorist threat. 


PRINCIPLES AND COMPONENTS 
OF EMERGENCY MANAGEMENT 


There are four components to all-hazards disaster management. They 
include mitigation, preparedness, response, and recovery. 


Mitigation involves adopting measures to reduce exposure and poten- 


tial loss from hazardous events. Building guidelines and restrictions 
(such as zoning and building codes) are frequently used as mitigation 
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techniques. Mitigation may also involve educating businesses and the 
public on measures they can take. In the case of preventing terrorism, 
mitigation measures might include educating the public on safety pre- 
cautions and first-aid techniques. 


Preparedness includes activities undertaken before an event to ensure 
an effective response. These may involve hiring staff; conducting 
training, tests, and drills; stockpiling equipment; and establishing 
facilities, such as emergency operations centers. A key element of pre- 
paredness is the development of plans that link together all the 
aspects and resources committed to emergency management. 


Response measures are the time-sensitive actions to save lives and 
property at the onset of an incident. They include issuing warnings, 
notifying emergency management personnel of the crisis, aiding vic- 
tims, providing security and traffic control, assessing the extent of 
damage and estimating support needs, evacuating and sheltering 
affected populations, keeping people informed, and requesting help 
from outside the jurisdiction. 


Recovery is the effort to restore infrastructure and the social and eco- 
nomic life of a community. In the short term, it may comprise estab- 
lishing essential critical infrastructure such as power, communication, 
water and sewage, and public transportation. It may also include pro- 
viding humanitarian assistance such as food and clothing. Long-term 
recovery involves restoring economic activity and rebuilding com- 
munity facilities and family housing. This might involve emergency 
economic aid, consulting services, business loans, environmental 
monitoring, and mental health services such as treatment and coun- 
seling. 


EMERGENCY MANAGEMENT 
SYSTEMS AND OPERATIONS 


The current U.S. national response system is guided by Homeland 
Security Presidential Directive 5 (HSPD-5).!2 HSPD-5 required the 
establishment of a National Response Plan and a National Incident 
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The National 
Response Plan 


Management System (NIMS). Under HSPD-5, the secretary of 
homeland security is the principal federal officer for domestic inci- 
dent management, responsible for drafting, coordinating, and 
implementing the National Response Plan and the NIMS and coor- 
dinating federal operations within the United States to prepare, 
respond, and recover from terrorist attacks, major disasters, and 
other emergencies. 


The National Response Plan replaces the Federal Response Plan. 
Originally developed in 1992, the Federal Response Plan was a coop- 
erative agreement signed by 27 federal departments and agencies to 
detail a mechanism for the delivery of assistance to state and local gov- 
ernments overwhelmed by major disasters and other emergencies. 
The Federal Response Plan was later revised to include an annex for 
responding to terrorist attacks. The revised plan established two cate- 
gories of emergency management—crisis management and conse- 
quence management. Crisis management included measures to 
anticipate, prevent, or resolve a threat or act of terrorism. It was con- 
sidered predominantly a federal law enforcement responsibility with 
state and local law enforcement playing supporting roles. The Federal 
Bureau of Investigation was assigned primary responsibility for crisis 
management. Consequence management included measures to pro- 
tect public health and safety, restore essential government services, 
and provide emergency relief for the consequences of terrorist acts. 
States had primary responsibility for consequence management with 
the federal government providing assistance. FEMA had responsibil- 
ity for directing federal consequence management. 

The Federal Response Plan was the subject of some controversy. It 
was not clear under the plan when federal responsibility for manag- 
ing responses to terrorist incidents would shift from the FBI to FEMA. 
Another concern was whether the plan accounted for all the emer- 
gency response functions (ERFs) that might be required in support of 
a national emergency. Finally, the relationship between the Federal 
Response Plan and other national plans for dealing with emergencies 
such as the release of radiological material or hazardous material 
spills was unclear. 

HSPD-5 directed that crisis and consequence management be 
treated as a single, integrated function rather than two separate 
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activities. The plan’s main purpose is to define the roles and respon- 
sibilities for supporting a domestic incident. In addition, the direc- 
tive required the National Response Plan to establish protocols for 
different threats and threat levels, as well as incorporate existing fed- 
eral emergency and incident management plans. It also called for the 
upgrading of ERFs to include public affairs, intergovernmental com- 
munications, and other necessary functions. 

Drafting of a National Response Plan to replace the Federal 
Response Plan engendered more controversy. The initial draft of the 
plan was considered by many to be too cumbersome and complex. A 
second draft proved overly simplistic. The Department of Homeland 
Security then settled on a simple basic plan with supporting annexes, 
in effect making the National Response Plan an umbrella for a family 
of plans covering natural disasters, technological emergencies, and ter- 
rorist attacks including the U.S. Government Interagency Domestic 
Terrorism Concept of Operations Plan, the Federal Radiological 
Emergency Response Plan, Mass Migration Response Plan, and the 
National Oil and Hazardous Substances Pollution Contingency Plan. 

While the National Response Plan was being finalized, the 
Department of Homeland Security released an Initial National 
Response Plan that superseded the Federal Response Plan. The Initial 
National Response Plan accounts for the role of the Department of 
Homeland Security in managing domestic incidents including the 
function of the Homeland Security Operations Center (HSOC), which 
now serves as the primary national center for operational communi- 
cations and information. The HSOC includes provisions for an 
Interagency Incident Management Group (IIMG). The IIMG is made 
up of senior representatives from federal departments and agencies, 
nongovernmental organizations, and the DHS. It is their task to coor- 
dinate support for their organizations for national operations. 

The National Response Plan also calls for the secretary of home- 
land security to establish a principal federal official (PFO). The PFO 
acts as the local DHS representative during an incident and will over- 
see and coordinate federal activities and work with local authorities 
to determine requirements and provide timely assistance. The PFO 
also directs the joint field office (JFO). Federal activities at a local inci- 
dent site will be integrated with state and local authorities through a 
JFO. The JFO incorporates existing entities such as the joint opera- 
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The National 
Incident 
Management 
System 


tions center, the disaster field office, and other federal offices and 
teams that provide on-scene support. 

While the Initial National Response Plan integrated all federal 
activities under the authority of the Department of Homeland 
Security, the attorney general retains lead responsibility for the crim- 
inal investigation of terrorist acts inside the United States.!3 
Generally acting through the Federal Bureau of Investigation, the 
attorney general also retains responsibility for coordinating with 
other members of the law enforcement community. HSPD-5 requires 
the attorney general and the secretary of homeland security to estab- 
lish appropriate mechanisms for coordination between their two 
departments. 


HSPD-5 also called for the development of the NIMS. Approved by 
the secretary for homeland security in March 2004, NIMS provides a 
framework for ensuring interoperability among federal, state, and 
local assets. It establishes procedures for managing operations, con- 
ducting training, and setting requirements, standard terminology, 
and common procedures. State and local governments must adopt 
the NIMS to receive federal preparedness assistance through grants, 
contracts, and other fund allocations. 

The NIMS has six components: command and management, pre- 
paredness, resource management, communications and information 
management, supporting technologies, and ongoing management 
and maintenance. 


Command and Management 


The NIMS standardizes incident management for all hazards and 
across all levels of government. It provides detailed instructions on 
the organization and responsibilities and procedures for incident 
command systems (ICS), multiagency coordination systems, and 
public information systems. 

First developed by U.S. fire departments, the ICS has become the 
principal means used by responders to direct field operations. ICS is 
a standardized on-scene emergency management concept that allows 
for multiple agencies, including responders from different jurisdic- 
tions to operate under an integrated command structure. Once estab- 
lished the ICS organization has five functions: command, operations, 
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planning, logistics, and finance and administration. If required, an 
information and intelligence section may also be established. 

When the response to an incident involves support from different 
governmental and geographic jurisdictions with different functional 
and legal responsibilities, a unified command structure is estab- 
lished. Supporting agencies integrate their efforts through a collab- 
orative process, usually at an incident command post located at or 
near the scene of the disaster. 

The purpose of multiagency coordination systems is to provide 
support for field operations being directed by the incident com- 
mander. Primary activities include providing logistical support, 
tracking resources, directing incident-related information, and coor- 
dinating interagency and intergovernmental issues. These activities 
are usually directed at an emergency operations center (EOC). 

Public information systems include means for communicating 
timely and accurate information to the public during periods of cri- 
sis or emergencies. Operations may call for the establishment of a 
joint information center, a location where public affairs profession- 
als representing various agencies can coordinate their activities and 
share information. 


Preparedness 


The NIMS establishes specific measures and capabilities that juris- 
dictions and agencies should develop and incorporate into an over- 
all system to enhance preparedness for managing all hazards. The 
measures include programs for planning, training, exercises, per- 
sonnel and equipment qualifications and certification, publications 
management, and mutual aid. Mutual aid agreements provide 
the means for one jurisdiction to supply resources, facilities, serv- 
ices, and other required support to another jurisdiction during an 
incident. 


Resource Management 


According to the NIMS, standardized means to classify, inventory, 
track, and dispatch resources before, during, and after an incident. It 
establishes how operations are funded and reimbursed. Generally, 
resource management activities are prescribed in appropriate emer- 
gency operations plans. 
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Communications and Information Management 


The NIMS communications and information systems enable the 
essential functions needed to provide a common operating picture 
and interoperability for incident management. Information that must 
be shared over these systems include disseminating indicators and 
early warnings, communicating operational decisions, and develop- 
ing and maintaining overall awareness of response activities. 


Supporting Technologies 


In addition to providing a framework for preparing and responding 
to domestic incidents, the NIMS serves to help develop new tech- 
nologies that will better support implemention of the national 
response system. It provides an architecture for how the Department 
of Homeland Security’s S&T Directorate will help develop support- 
ing technologies. 


Ongoing Management and Maintenance 


As part of the NIMS, the DHS will establish a multijurisdictional, 
multidisciplinary NIMS Integration Center. This center will provide 
oversight of the NIMS. All users and stakeholders, including various 
levels of government and the private sector, will be asked to partici- 
pate in NIMS Integration Center activities. 


THE FUTURE OF NATIONAL 
DOMESTIC INCIDENT MANAGEMENT 


While the establishment of the National Response Plan and the NIMS 
provides the framework for establishing an integrated national sys- 
tem for responding to terrorist attacks and other national disasters, 
there are many issues involving the implementation that have yet to 
be resolved. Changes and modifications will likely be a hallmark of 
the national response for years to come. 


The implementation of the ICS concept offers a case in point. State and 
local governments have considerable flexibility in how they choose to 
implement the system. In most incidents usually the local police or fire 
service representative is in charge. For some emergencies, such as a 
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fire or hostage-taking, there would be little dispute over which agency 
should take the lead. For others, for example, a combination of inci- 
dents, establishing the lead responsibility would be more difficult. In 
some cases, different command traditions, local political disputes, or 
disagreements between agencies or leaders might complicate the 
process of establishing an effective ICS. 


Another issue to be resolved in the NIMS is the role of the principal 
federal officer (PFO), who is supposed to take charge of national 
assets at the scene of an incident. There are, for example, questions 
about the extent of the PFO’s authority at the site, particularly in rela- 
tion to the role of the FEMA regional director, who has traditionally 
served as the senior federal official at the scene of a major disaster. 


The state of supporting technologies is also a major issue of concern. 
The lack of interoperable communications both between emergency 
responders and across different government jurisdictions remains a 
cause of great concern.'4 While NIMS requires interoperable commu- 
nications standards, neither the standards nor the supporting equip- 
ment are available. The DHS has established a SAFECOM program to 
coordinate the development of an interoperable wireless communica- 
tions network.!° 

Also complicating an emergency response is that many first 
responders such as uniformed police are ill-organized and ill- 
equipped to rapidly address terrorist attacks that might require assets 
or equipment not normally employed during a tour of duty. Police 
officers, for example, lack the capacity to carry a lot of additional 
emergency response equipment in the trunk of their patrol cars. 
Officers on foot, bicycle, or equine patrol have even less capacity. 
Undercover agents and antiterrorism squads trying to blend into 
their surroundings and trying to appear inconspicuous have prob- 
lems carrying additional equipment as well.16 

Even when equipment is available, first responders find they have 
significant limitations. Clothing, gloves, and masks are bulky, heavy, 
and demanding on physical labor. Most protective gear is too uncom- 
fortable for extended wear. Routine activities such as communicating, 
pushing buttons, and observing surroundings cannot be easily 
accomplished in protective gear.” 
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Finally, it is often extremely difficult to extend the situational 
awareness that must be extant in the emergency response system to 
the frontline responders. For example, fire personnel need to know 
hydrant and standpipe locations, as well as utility and building 
designs and hazardous material inventories. Often, critical informa- 
tion is stored in locations or formats (e.g., paper records) that prevent 
them from being readily on hand. 

Taken together, these challenges will present enormous obstacles to 
responders that may well have to deal with multiple catastrophic 
attacks requiring the integration of multiple assets across multiple 
regions and multiple layers of government. To effectively address 
such threats, the United States will require better technology to sup- 
port the national response system. 


ISSUES: 
ORGANIZED CHAOS 


The National Commission on Terrorist Attacks upon the United 
States, popularly known as the 9/11 Commission, found signifi- 
cant problems with the response to the disaster at the World 
Trade Center on September 11. The staff prepared a detailed 
report of the events on that fateful day. 


Excerpt from the Commission’s Staff Statement 


As we turn to the events of September 11, we will try to 
describe what happened in the following one hundred min- 
utes. . . . [North Tower] The plane cut through floors 93/94 
to 98/99 of the building. All three of the building’s stair- 
wells became impassable from the 92nd floor up. Hundreds 
of civilians were killed instantly by the impact. Hundreds 
more remained alive but trapped. A jet fuel fireball erupted 
upon impact, and shot down at least one bank of elevators. 
The fireball exploded onto numerous lower floors, includ- 
ing the 77th , 50th , 22nd , West Street lobby level, and the 
B4 level, four stories below ground. . . . Within minutes, 
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New York City’s 9-1-1 system was flooded with eyewitness 
accounts of the event. Most callers correctly identified the 
target of the attack. ... 

Because of damage to the building’s systems, civilians 
did not receive instructions on how to proceed over the 
public address system. Many were unable to use the emer- 
gency intercom phones as instructed in fire drills. Many 
called 9-1-1. 9-1-1 operators and FDNY dispatchers had no 
information about either the location or magnitude of the 
impact zone and were therefore unable to provide informa- 
tion. . . . Although the default guidance to stay in place may 
seem understandable in cases of conventional high rise 
fires, all the emergency officials that morning quickly 
judged that the North Tower should be evacuated. 

Shortly before 9:00 a.m. . . . Impressed by the magni- 
tude of the catastrophe, fire chiefs had decided to clear the 
whole WTC complex, including the South Tower. Just after 
the South Tower impact, chiefs in the North Tower lobby 
huddled to discuss strategy for the operations and com- 
munication in the two towers... . At 9:05 a.m., two FDNY 
chiefs tested the WTC complex’s repeater system. This was 
the system installed after the 1993 bombing in order to 
enable firefighters operating on upper floors to maintain 
consistent radio communication with the lobby command. 
The system had been activated for use on portable radios 
at 8:54 a.m., but a second button which would have 
enabled the master hand-set was not activated at that time. 
The chief testing the master handset at 9:05 a.m. did not 
realize that the master handset had not been activated. 
When he could not communicate, he concluded that the 
system was down. ... 

The emergency response effort escalated with the crash 
of United 175 into the South Tower. With that escalation, 
communications and command-and-control became 
increasingly critical and increasingly difficult. First respon- 
ders assisted thousands of civilians in evacuating the tow- 
ers, even as incident commanders from responding 
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agencies lacked knowledge of what other agencies and, in 
some cases, their own responders were doing. 

The North Tower collapsed at 10:26 a.m. The FDNY 
Chief of Department and the Port Authority Police 
Department Superintendent and many of their senior staff 
were killed. The Fire Department of New York suffered the 
largest loss of life of any emergency response agency in U.S. 
history. The Port Authority Police Department suffered the 
largest loss of life of any American police force in history. 
The New York Police Department suffered the second 
largest loss of life of any police force in U.S. history, 
exceeded only by the loss of Port Authority police the same 
day. The nation suffered the largest loss of civilian life on its 
soil as a result of a domestic attack in its history. 


1. Does this excerpt of the staff report of the 9/11 attack reflect 
any of the problems commonly associated with responding 
to a major incident? Which ones? 


2. What contributed to problems? 


3. How might the response have been organized? 


CHALLENGES FOR STATE 
AND LOCAL GOVERNMENT 
EMERGENCY OPERATIONS PLANNING 


Even with increasing federal guidance and involvement, state and 
local jurisdictions face many challenges in adopting common com- 
mand and control standards, ensuring equipment interoperability, 
and implementing mutual aid agreements. In many cases, emer- 
gency plans also must be revised to address continuity of operations 
and continuity of state and local government/services, ensuring 
that operations and governmental authority are not disrupted as a 
result of a terrorist attack or other major disaster. 18 

Many state and local jurisdictions had emergency operations plans 
in place before the September 11 attacks, but many of these plans 
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required updating to account for the guidance in the newly estab- 
lished NIMS and mutual aid agreements, the threat of terrorist acts, 
and the potential for catastrophic threats including weapons of mass 
destruction. 


Updating of plans may require adding roles and responsibilities for 
assessing terrorist threats; information on nuclear, biological, chem- 
ical, radiological, and agroterrorism agents and cyberthreats; 
actions in regard to changes in the Homeland Security Advisory 
System; mass casualty care; and responses to potential terrorist 
attacks. ! 


State and local governments may also find they must give greater 
consideration to the identification and protection of critical infra- 
structures. Local officials are primarily responsible for ensuring the 
continuation of critical services in communities affected by disasters. 
Protecting critical infrastructures will also be essential for enabling 
rescue operations and ensuring the continuity of government opera- 
tions. Emergency operations plans must inventory and assess the vul- 
nerability of critical infrastructures and develop suitable mitigation 
and preparedness measures.” 


In the wake of September 11 many state and local governments have 
added new capabilities or are seeking to expand their capacity to 
respond to disasters through cooperative agreements. This is often 
accomplished through intrastate (communities within a state) and 
interstate (among two or more states) mutual aid pacts, such as emer- 
gency management assistance compacts (EMACs). 

Establishing and updating mutual aid agreements should be a pri- 
ority for revising emergency operations plans. An effective mutual 
aid agreement should address liability and reimbursement, as well as 
rapidly identify the availability and location of needed resources, and 
provide a means to accurately track the resources. Emergency opera- 
tions plans should also account for the reception and employment of 
national resources that might support state and local efforts. These 
resources might include the Strategic National Stockpile, National 
Medical Disaster System, civil support teams, and urban search and 
rescue task forces. 
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Strategic National Stockpile 


The Strategic National Stockpile is a supply of medications and med- 
ical/surgical equipment maintained by the Department of Health 
and Human Services to supplement and resupply state and local pub- 
lic health agencies in the event of a national emergency. The stockpile 
includes push packages located around the country that can be 
deployed to a designated place within 12 hours. Follow-on supplies 
can be delivered within 24 to 36 hours. Currently, many state and 
local governments lack robust plans or capabilities to distribute sup- 
plies from the Strategic National Stockpile. 


The National Medical Disaster System 


The National Medical Disaster System (NMDS) coordinates hospital 
support to supplement state and local needs and assists in the evacu- 
ation of patients from a disaster area. The NMDS also includes a num- 
ber of emergency response teams. Disaster medical assistance teams 
(DMATs) are professional medical personnel and support staffs that 
can be deployed to provide emergency medical care during a disaster. 
Veterinary medical assistance teams (VMATs) can provide emergency 
medical treatment of animals and conduct disease surveillance. 
National pharmacist response teams (NPRITs) will be employed to 
assist in mass chemoprophylaxis or vaccination in response to an 
infectious disease threat. National medical response teams—weapons 
of mass destruction (NMRIs—-WMD) are specialized response forces 
designed to provide medical care following nuclear, biological, 
and/or chemical incidents. The national nurse response team (NNRT) 
can be used to deploy hundreds of nurses to the site of an emergency. 
Disaster mortuary operational response teams (DMORTs) that work 
under the guidance of local authorities, provide technical assistance 
and personnel to recover, identify, and process deceased victims. 


Civil Support Teams 


Civil support teams (CSTs) are teams of 22 National Guard personnel 
that are available to support civil authorities in the event of a chemi- 
cal, biological, radiological, nuclear, or high-yield explosive (CBRNE) 
incident by identifying hazardous agents, assessing the spread of con- 
tamination, advising on response measures, and coordinating further 
military support. 


—P— 


Sauter ch15-16 3/21/05 12:55 PM Page 328 5 


328 


Continuity of 
Government and 
Operations 


PART 3 * HOMELAND SECURITY 


Urban Search and Rescue Task Force 


Urban search and rescue (US&R) task forces conduct search and rescue 
operations in damaged or collapsed structures, perform hazardous 
materials evaluations, and provide stabilization of damaged structures. 
They can also provide emergency medical care. A US&R task force is a 
partnership between local fire departments, law enforcement agencies, 
federal and local governmental agencies, and private companies. 


Emergency operations plans must account for the continued per- 
formance of state and local government and essential services during 
a crisis. According to FEMA, planning goals should include the abil- 
ity to operate within 12 hours of activation, as well as sustain opera- 
tions for up to 30 days. Elements of a viable capability include a line 
of succession, delegation of authorities, establishment of alternate 
facilities, safeguarding of vital records, providing for communica- 
tions, and ensuring adequate logistical support for essential activities. 


CHAPTER SUMMARY 


The concept of national response management has evolved signifi- 
cantly since the 9/11 attacks. Governments at all levels have responsi- 
bility for responding to terrorist attacks. The national response is 
guided by the framework provided by the National Response Plan and 
the National Incident Management System. The principle of all-haz- 
ards response, including establishing an on-scene incident commander 
for each event, guides the U.S. approach to emergency response. 

Though significant progress has been made since 9/11 in building 
a more structured national emergency response system, much work 
remains to be done. There are technical, organizational, and doctrinal 
issues that must be resolved at all levels of government. 


CHAPTER QUIZ 


1. What is an all-hazards approach? 


2. What are the principles of emergency response? Why are they 
important? 
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3. What are the most significant challenges in emergency response? 
4. Who will be in charge at the scene of a terrorist attack? 
5. Describe the components of NIMS. 
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BUSINESS PREPAREDNESS, 
CONTINUITY, AND RECOVERY 


Private Sector Responses to Terrorism 


Immediately after Sept. 11, there was urgency to rethink disaster planning, 
risk assumptions, and preparation contingencies. 


Robert C. Chandler and J. D. Wallace, “Business Continuity 
Planning after September 11” 


CHAPTER OVERVIEW 


When the role of the private sector in homeland security is discussed, 
most think of its impact on big office towers and major industries. 
This perception is simply wrong. Disasters, including terrorism, can 
strike at any business no matter how small. This chapter surveys the 
measures that companies can take to protect their operations, facili- 
ties, and employees. 


CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Understand how September 11 has changed private-sector per- 
ceptions toward preparedness. 


2. Describe what is meant by disaster recovery and continuity of 
operations. 
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3. Understand the legal implications of preparedness planning. 
4. Describe the steps in preparedness planning. 


NEW WORLD OF DISORDER 


Terrorists strike at more than nations and people; companies, large 
and small, can fall victim as well. An estimated 1,200 to 2,000 small 
businesses, including about 600 in the Twin Towers, were wiped out 
by the 9/11 attack on New York City. The attack also affected over 
15,000 businesses in the area and 13.4 million square feet of real 
estate. Lower Manhattan lost more than 100,000 employees to death, 
relocation, or unemployment. Companies disrupted by the collapse 
of the World Trade Center buildings ranged from rich, multinational 
corporations to small mom-and-pop stores. Robert Garber’s Bits, 
Bites and Baguettes that stood in the shadow of the Twin Towers 
was a typical casualty. On September 10, 2001, Bits and Bites had its 
busiest day ever, revenues were up 35 percent, and staff had 
quadrupled since the small restaurant and catering service had been 
established in 1997. After September 11, the business was barri- 
caded for two months, pushing Garber’s company to the edge of 
insolvency.' 

Acts of terrorism are not the only threat to private enterprise; busi- 
nesses can also suffer from the effects of all sorts of natural and tech- 
nological (human-made) disasters including fires, floods, earth- 
quakes, tornadoes, and industrial accidents. Many of the practices 
and precautions recommended for preventing, responding to, and 
mitigating these kinds of events are equally applicable to preparing 
for terrorist strikes. In other cases, additional precautions and meas- 
ures are required to safeguard business practices against deliberate 
acts that may interfere with the normal course of everyday com- 
merce. 

Failure to undertake disaster preparedness could have a dramatic 
impact on business practices. For example, according to a 1998 survey 
by Strategic Research Corporation, the financial impact of a major 
outage would have a significant impact on America’s largest compa- 
nies including costing brokerage operations $6.5 million per hour. A 
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breakdown in the credit-card sales authorization system would cost 
$2.6 million per hour. The effects of disaster are perhaps most signif- 
icant on small businesses. Data collected by FEMA suggest that half 
the small companies that experience a disaster go out of business 
within two years. As the National Red Cross emphasizes: No busi- 
ness should risk operating without a disaster plan. 

Indeed, business continuity and disaster response and recovery 
planning have become an integral component of modern business 
practices. In the 1980s as companies became increasingly dependent 
on computers, disaster recovery emerged as a formal disciple. The 
main focus of effort was on protecting data. Over time the emphasis 
has shifted and expanded to include supply chain management, the 
physical security of property and personnel, and securing informa- 
tion networks. 


DEFINITIONS AND STANDARDS 


Business continuity involves developing measures and safeguards 
that will allow an organization to continue to produce or deliver 
goods or services under adverse conditions. Disaster response and 
recovery includes responding to, mitigating, and recovering or recon- 
stituting personnel, infrastructure, and business capabilities in the 
wake of an event. The main difference between the two efforts is that 
continuity planning is meant to prevent business interruptions, while 
disaster planning involves dealing with major interruptions that 
occur as a result of a sudden, calamitous event that causes significant 
damage or loss. Collectively, these activities are often referred to as 
contingency planning. 

There are no universal standards for preparedness in the private 
sector. Many groups, however, have endorsed standards promul- 
gated by the National Fire Protection Association in NFPA 1600 as 
an appropriate model for standards on disaster /emergency man- 
agement and business continuity programs. The NFPA offers 
descriptions of the basic criteria for a comprehensive program that 
addresses disaster recovery, emergency management, and business 
continuity. 
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CHANGING BUSINESS 
ENVIRONMENT: THE USAMA EFFECT 


There are still significant gaps and great disparities in how companies 
prepare for future contingencies. A 2002 survey of 1,057 medium and 
large businesses (more than 100 employees) by Digital Research Inc. 
found that about one in four companies do not have business conti- 
nuity/disaster recovery plans. Twenty percent of the businesses that 
do have plans, have not tested them in five years. The larger the com- 
pany in terms of revenues and employees, the more likely they were 
to have plans in place and to have tested them, at least annually. 

According to the survey, the al-Qaida attacks on New York City 
and Washington DC convinced more businesses to undertake plan- 
ning and caused nearly three-quarters of businesses with plans in 
place to update and improve plans. On the other hand, according to 
the survey the majority of companies with business continuity /dis- 
aster plans implemented their planning prior to 9/11. The impact of 
9/11 on small-business planning is less clear. Despite the dramatic 
example of the impact of attacks in New York on small enterprises, it 
is not clear that preparedness among the small-business community 
has improved significantly. 

Thus, it appears that the “Usama effect,” as it is referred to by some 
disaster recovery experts, may have made only a temporary and tran- 
sitory impact on the likelihood that companies will prepare for a ter- 
rorist attack or indeed any kind of disaster. Nevertheless, the general 
trend, especially for medium and large companies, is that commercial 
enterprises are increasingly recognizing the need to pay greater atten- 
tion to ensuring the continuity of their business practices in the face 
of adversity. 


LEGAL ISSUES 


Sound business practices and concern over the safety of employees, the 
surrounding community, and the environment are not the only moti- 
vation for undertaking contingency planning. Federal, state, and local 
laws may also require companies to undertake some preparedness 
measures. Occupational Safety and Health Administration (OSHA) 
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regulations offer a case in point. OSHA Standard 29 CFR 1910.38 
requires plans that designate actions that employers and employees 
must take to ensure safety in the event of “fire and other emergencies.”? 

In addition, other legal requirements may impact on the need for 
contingency planning as well. There are a number of federal laws that 
regulate hazardous materials, including the Superfund Amendments 
and Reauthorization Act of 1986 (SARA), the Resource Conservation 
and Recovery Act of 1976, the Hazardous Materials Transportation 
Act, the Occupational Safety and Health Act, the Toxic Substances 
Control Act, and the Clean Air Act. SARA, for example, regulates the 
packaging, labeling, handling, storage, and transportation of haz- 
ardous materials. The law requires a facility to furnish information 
about the quantities and health effects of materials used at the facility 
and to promptly notify local and state officials whenever a significant 
release of hazardous materials occurs. 

OSHA has also established equipment and training requirements 
for fire brigades and other response teams that might be employed in 
dealing with hazardous materials. Some employee training such as 
fire drills is also mandatory.? Detailed definitions as well as lists of 
hazardous materials and training and equipment requirements can 
be obtained from the Environmental Protection Agency and OSHA. 


ISSUES: 
LEADERSHIP AND LIABILITY 


In the wake of a series of devastating corporate scandals Congress 
adopted new legislation that required chief executive officers 
(CEO) to certify that they had reviewed the financial practices of 
their companies. In addition to requiring corporate officers to take 
responsibility for the accuracy of financial statements, the Public 
Accounting Reform and Investor Protection Act of 2002 
(Sarbanes-Oxley) requires that companies certify they understand 
the risks that may impact the financial reporting process. 

Some security experts argue that Sarbanes-Oxley may implic- 
itly require sound contingency plans. A proper assessment of 
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risk might be construed to include operational risks resulting 
from inadequate business continuity or disaster recovery plans. 

Companies should recognize that they may incur legal or 
criminal liability if response plans are absent or inadequate. For 
example, courts determine liability by weighing the probability 
of the loss compared to the magnitude of harm, balanced against 
the cost of protection. Courts will use this standard to determine 
if companies and individuals took reasonable precautions, in 
legal terms showed “due diligence” in mitigating the effects of a 
disaster on business operations. Thus, a sound business contin- 
gency plan would account for potential liabilities that might be 
incurred by the company or its representatives. 


1. Should companies be held culpable for injuries and losses 
that occur from a terrorist attack? 

2. What kinds of measures should they be expected to take? 

3. Should Sarbanes-Oxley require companies to certify they 
have taken precautions against disasters? Should the fed- 
eral and state governments provide more regulation? 


PLANNING FOR THE WORST 


Most specialists in the field agree that the centerpiece of preparations 
for any size company is the development of a business 
continuity /disaster recovery program, built around a sound contin- 
gency plan. A contingency plan is a comprehensive statement of 
actions to be taken before, during, and after a disaster. A successful 
planning process must achieve three goals: (1) create awareness of 
potential disasters, (2) define actions and activities that will minimize 
disruptions of critical functions, and (3) develop the capability to 
reestablish business operations. Experts also agree that for the plan to 
be effective it must be documented, tested, and updated periodically 
as part of a comprehensive contingency program. 

The cost and resources invested in contingency planning will vary 
with the size of the business and the scope of its resources, risks, and 
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Obtain 
Management 
Commitment 


Establish a 
Planning 
Committee 


vulnerabilities. Small and medium-size businesses may face a num- 
ber of challenges in developing and implementing plans, such as lim- 
ited employee time that can be dedicated to the tasks of maintaining 
a preparedness program.* 

Business continuity and disaster recovery planning professionals 
generally recommend a sequential planning process that could be 
applied to most companies regardless of their size and number of 
employees. Many aspects of the contingency planning process are 
equally applicable to nongovernmental and governmental organiza- 
tions. There are many different recommended versions of the planning 
process. Most contain the following basic elements: obtain management 
commitment, establish a planning committee, perform a risk assess- 
ment, establish operational priorities, determine continuity and recov- 
ery options, develop a contingency plan, and implement the plan.° 


Senior management should be responsible for coordinating planning 
activities. Among the most critical activities that they perform are 
ensuring that sufficient time and resources (such as a budget for 
research, printing, seminars, consulting services, and other expenses 
that may be necessary during the planning process) are committed to 
developing an effective plan and that developing the plan is a priority. 


Since a disaster could well affect every aspect of a company’s busi- 
ness practices from the acquisition of raw materials to public relations 
and advertising, representatives from every facet of the company 
need to be involved in the planning process. A planning committee 
should be appointed to develop and implement the business conti- 
nuity / disaster recovery plan. The CEO or plant manager should head 
the group. Committee members might also include operations man- 
agers; union representatives; information technology or data process- 
ing managers; legal, purchasing, and financial management 
representatives; engineering and maintenance personnel; public 
information and human resources personnel; safety, health, and envi- 
ronmental affairs representatives; sales and marketing and commu- 
nity relations representatives; suppliers; and service providers. 

The committee’s purpose is to develop and document the contin- 
gency plan. Duties for the committee would include drafting a mis- 
sion statement, budget, work plan, and time line for various planning 
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activities. The committee would also be responsible for research, 
engaging consultants, meeting with outside groups, and supervising 
planning activities. 


Most specialists consider this step to be the most vital task for estab- 
lishing an effective business continuity/disaster recovery plan. 
Typically, the risk assessment will comprise an evaluation of threats, 
vulnerabilities, and costs. 

Threats are the things that can go wrong or that can “attack” a com- 
pany’s personnel, property, products, or systems. Threats include nat- 
ural disasters like earthquakes and floods and human-made disasters 
such as industrial accidents, fraud, and sabotage, or the loss of a key 
supplier or customer. An assessment would not only include what 
threats a company might face, but how likely it would be that differ- 
ent threats will actually happen. 

Vulnerabilities are those things that make the company more prone 
to a disaster or more likely to suffer damage in the event of an inci- 
dent. For example, in the advent of a fire, the presence of a vast 
amount of flammable material, like fuel oil, would be a significant 
vulnerability. 

Costs include assessment of the financial impact of various disas- 
ter scenarios. An assessment should consider both direct costs, such 
as the loss of revenues due to an interruption in sales, and indirect 
costs, like a devaluation of a company’s stock as the result of a loss of 
confidence by stockholders in how the management team responded 
to a particular disaster. This part of the risk assessment is often called 
the business impact analysis. 

Evaluations of threat, vulnerability, and cost are not only used to 
determine what dangers to prepare for and how to meet them, but 
also to prioritize preparedness efforts. As part of the planning 
process, organization leadership will have to decide which threats are 
the most likely and the most dangerous, and consequently with 
regards to safety and sound business practices, where they should 
invest their time and effort in preparing to deal with the conse- 
quences of various dangers. 

The assessment should define the possible disasters that a business 
might encounter and their potential impact on the company’s business 
practices. Traditionally, fire is the most common form of disaster expe- 
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rienced by businesses, but depending on geographical location, enter- 
prises might be particularly vulnerable to other kinds of danger as 
well including floods, tornadoes, or wildfires. Usually accurate and 
fairly complete information on likely hazards can be obtained through 
local and state organizations such as emergency management offices, 
floodplain management, public or commercial geospatial information 
services, geological surveys, and universities and colleges. 

Determining if a company is susceptible to a terrorist attack is more 
problematic. Location and activity might suggest if a business is more 
likely to become a victim of a terrorist incident. For example, given 
the number of terrorist incidents involving commercial aviation, busi- 
nesses involved in this sector, including tourism, travel services, and 
airport vendors, might have greater concern over how their practices 
might be affected by a terrorist attack. Organizations involved in 
politically controversial activities might also consider the potential 
for becoming victims of a terrorist act. Sources of information for con- 
ducting a terrorist risk assessment might include local law enforce- 
ment, industry associations, or a business sector information-sharing 
and analysis center. 

As part of risk assessment, each area of an organization (such as 
billing, shipping, advertising, utilities, and information technology 
services) should be assessed to determine the potential consequences 
of different kinds of disasters. Impacts that should be considered are 
the cost of repairing or replacing equipment; loss of worker produc- 
tivity and the expense of replacing and training new personnel; 
impact on customers; violations of contractual agreements; the impo- 
sition of fines and penalties or legal costs; and interruption of sup- 
plies or distribution of products. 


Before the planning team begins to decide how to best prepare for dif- 
ferent threats and mitigate vulnerabilities, it must first identify the 
critical needs of each element within the company. Critical elements 
are those resources, leadership, or capabilities whose loss would stop 
or significantly degrade essential business activities, such as the 
delivery of goods or services. The analysis of operational priorities 
should determine the maximum amount of time that the organization 
can operate without each critical element. This step is essential for 
ensuring that the most important parts of the business are addressed 
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first. An assessment of operational priorities might include determin- 
ing essential activities and systems, key personnel, and vital records 
and documents. Examples of critical operational priorities might 
include sole-source vendors; lifeline services like water, oil, or gas; 
and irreplaceable equipment. The assessment usually ranks person- 
nel, facilities, and services as essential, important, or nonessential. 


Another critical task for the planning committee is to determine the 
practical alternatives for preparing the organization to deal with a 
disaster. The main focus in developing continuity and recovery 
options should be protecting the operational priorities identified by 
the planning committee. 

As part of this process, the committee will collect critical data that 
would be needed to respond to a disaster including critical and 
backup personnel listings; essential telephone numbers; inventories 
of equipment, office supplies, and documents; lists of vendors and 
customers; storage locations; software and data files backup/reten- 
tion schedules; and important contracts. 

The committee should also gather information about current capa- 
bilities that are already available by reviewing existing plans, policies, 
and programs including evacuation and fire plans, safety and health 
programs, environmental policies, security procedures, finance and 
purchasing procedures, employee manuals, hazardous materials 
plans, capital improvement programs, and mutual aid agreements. 

In particular, any assessment should include a rigorous evaluation 
to determine if insurance policies are adequate to meet the liabilities 
that might be incurred as a result of a disaster. Most small-business 
insurance policies include basic property and liability insurance. 
Basic property insurance generally covers losses from fire or a light- 
ning strike. Additionally, small-business policies usually cover dam- 
age from windstorm, hail, explosion, riot and civil commotion, and 
destruction caused by vehicles or vandalism. Coverage against earth- 
quakes, floods, and building collapse is usually optional. Liability 
insurance protects business assets in the event the company is sued. 

In addition to examining pertinent documents, the planning com- 
mittee should review the status of internal assets available to respond 
to an emergency. These might include resources and capabilities that 
could be needed in an emergency such as materials response teams, 
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emergency medical services, security, and the company’s public 
information officer. The committee should also be aware of any spe- 
cialized emergency equipment or facilities like fire protection and 
suppression equipment, communications equipment, first aid sup- 
plies, emergency supplies, warning systems, emergency power 
equipment, decontamination equipment, shelter areas, and first aid 
stations. Finally, the committee should know what backup services 
are available such as payroll, customer service, shipping and receiv- 
ing, and information technology systems. 

As part of this process, the committee will also have to review 
applicable federal, state, and local regulations to ensure that the plans 
in place and options being developed are consistent with the law and 
the industry and a company’s stated policies. Documents that might 
be reviewed include occupational safety and health regulations, envi- 
ronmental regulations, fire codes, seismic safety codes, transportation 
regulations, zoning regulations, and corporate policies.° 

Meetings should also be held with outside groups to determine what 
kind of support and resources may be available and what coordination 
would be required in the event of a disaster. Sources of information 
might include the community emergency management office, the office 
of the mayor or a community administrator, a local emergency plan- 
ning committee, fire and police departments, emergency medical serv- 
ices organizations (such as an ambulance service), the public works 
department or local planning commission, telephone, electric and other 
local utilities, hospitals, contractors, neighboring businesses, the 
American Red Cross, and the National Weather Service. 

Finally, options for processing data and conducting business activ- 
ities in case of a disaster should be researched and evaluated. There 
are four types of preparedness measures that might be undertaken to 
reduce the risk of a disaster. Deterrent measures reduce the likelihood 
of a disaster or deliberate attack. Preventive measures protect vulner- 
abilities and make an attack unsuccessful or reduce its impact. 
Corrective measures reduce the effect of an attack. Detective meas- 
ures discover attacks and trigger preventive or corrective controls. 
These measures may require new practices, personnel, or equipment. 
As part of the planning process, the committee will determine the 
costs and benefits of implementing these measures and their value for 
ensuring business continuity or responding to an attack. 
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Once the committee has decided what measures will be incorporated 
into the plan, the measures need to be documented in a comprehen- 
sive written product. The plan should include detailed procedures to 
be used before, during, and after a disaster, with specific responsibil- 
ities assigned to a management team covering all the important areas 
of the organization. Once completed, the plans should be approved 
by management. 

The plan should establish an emergency management group. 
Detailing the responsibilities of the management team is especially crit- 
ical since it will be in charge of the response and recovery process. This 
group will be the company leaders responsible for managing the “big 
picture,” controlling all incident-related activities. The mission of the 
emergency management group is to support the incident commander 
whose task it will be to oversee the technical aspects of the response. The 
incident commander is responsible for frontline management, making 
decisions on the scene regarding how to respond to the disaster and 
relaying requests for additional resources if they are needed. The group 
supports the incident commander by allocating resources and by inter- 
facing with the community, the media, outside response organizations, 
and regulatory agencies. The emergency director, who should be the 
facility manager, heads the emergency management group. 

Plans may also require establishing an emergency operations center 
(EOC). The EOC serves as the center used by the emergency manage- 
ment group to coordinate the response to a disaster. It should be 
located in a facility that is not likely to be involved in an incident. 

Business contingency plans normally include an executive sum- 
mary that provides a brief overview of the purpose of the plan; the 
facility’s emergency management policy; authorities and responsibili- 
ties of key personnel; the types of emergencies that could occur; and 
where response operations will be managed. A second portion of the 
plan should briefly describe how the core elements of emergency man- 
agement will be organized within the organization. These include 
communications; safety; property protection; community outreach; 
recovery and restoration of systems, operations, and facilities, admin- 
istration and logistics. The third portion of the plan spells out how the 
organization will respond to emergencies. 

In addition to the basic plan, support documents that might be 
needed in an emergency should also be developed. They might 
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include building and site maps that indicate utilities and shutoff loca- 
tions, floor plans, escape routes, emergency equipment inventories 
and location, alarm system plans, and the location of hazardous mate- 
rials and critical items. Other documents might include emergency 
procedures, personnel lists, and emergency-call rosters. 


After the plans are drafted, they should be tested. Procedures should 
also be established for maintaining and updating the plan. 
Implementation procedures should also allow for a regular review of 
the plan by key personnel. 

Finally, means for exercising and training must be established. 
Exercises could include everything from “table-top” exercises where 
the disaster management team reviews their responsibilities to full- 
scale drills. 

Training plans should include worker orientations and periodic 
classes that contain information on individual roles and responsibili- 
ties; threats, hazards, and protective actions; notification, warning, 
and communications procedures; means for locating family members 
in an emergency; emergency response procedures; evacuation, shel- 
ter, and accountability procedures; location and use of common emer- 
gency equipment; and emergency shutdown procedures. 

The importance of training in implementing contingency planning 
cannot be overstated. Research finds that employees who have par- 
ticipated in drills and classroom training respond faster and make 
better decisions when responding to an emergency.’ 


FROM THE SOURCE: 
GETTING ORGANIZED 


FEMA provides a number of resources to assist businesses in 
contingency planning, including an online emergency manage- 
ment business guide (www.fema.gov/library /bizindex.shtm). 


Excerpt from the FEMA Guide Describing the Requirements for a 
Company Emergency Operations Center 
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Emergency Operations Center (EOC) 


The EOC serves as a centralized management center for 
emergency operations. Here, decisions are made by the com- 
pany’s emergency management group. Regardless of size or 
process, every facility should designate an area where deci- 
sion makers can gather during an emergency. 

The EOC should be located in an area of the facility not 
likely to be involved in an incident, perhaps the security 
department, the manager’s office, a conference room or the 
training center. An alternate EOC should be designated in the 
event that the primary location is not usable. 

Each facility must determine its requirements for an EOC 
based upon the functions to be performed and the number of 
people involved. Ideally, the EOC is a dedicated area 
equipped with communications equipment, reference materi- 
als, activity logs and all the tools necessary to respond quickly 
and appropriately to an emergency. 

In a hazardous materials accident, an off-site medic was 
exposed to the spilled material and required hospitalization. It 
was determined that the person was able to enter the haz- 
ardous area unprotected because no one among a host of man- 
agers and facility responders was “in charge” at the scene. 


EOC Resources: 
e Communications equipment 


e Acopy of the emergency management plan and EOC 
procedures 


e Blueprints, maps, status boards 

e A list of EOC personnel and descriptions of their duties 
e Technical information and data for advising responders 
e Building security system information 

e Information and data management capabilities 

e Telephone directories 

e Backup power, communications and lighting 

e Emergency supplies 
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SUPPLY CHAIN SECURITY 


One aspect of contingency planning gaining greater attention is the 
challenge of supply chain continuity. In order to reduce the high 
costs of maintaining large inventories of products, many companies 
have adopted the concept of just-in-time delivery of goods and serv- 
ices. Quick and responsive delivery lessens the need to have large 
stockpiles on hand, thus reducing operating costs. As a conse- 
quence, supply chains have become increasingly fragile. Unex- 
pected delays in the delivery of products can negate the advantages 
of inventories that are managed by the speed in which orders are 
filled rather than by the size of a company’s warehouse. For 
instance, in the wake of the 9/11 attacks security at the borders and 
Canada was significantly upgraded. As a result, many truckers were 
delayed at border crossings for several hours. Since many truckers 
are only permitted to drive 10 hours per day, significant delays at 
the border can add an extra day to delivery time. After the attacks 
on the World Trade Center, Ford Motor Company idled five U.S. 
manufacturing plants because of slow delivery from parts suppliers 
in Canada.? 


Two issues regarding supply chain management are particularly 
problematic. Companies often have reduced visibility and control 
over the delivery of goods. Visibility represents the organization’s 
capacity to know where goods are and when they will be delivered. 
Control reflects the means companies have at their disposal to change 
how and when goods are delivered. A study conducted by Michigan 
State University identified four key components for an effective con- 
tingency plan for supply chain continuity." 


Risk Assessment 


The first is a thorough risk assessment that identifies the supply 
chain’s susceptibility to potentially crippling disruption. This assess- 
ment should include steps in the supply chain internal to the com- 
pany, as well as the role of customers and suppliers. One common 
technique employed in developing continuity plans is supply chain 
mapping. Mapping helps identify bottlenecks, important transporta- 
tion nodes, and critical suppliers within the supply chain. 
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Reducing and Monitoring Risks 


The second key effort is developing preventative measures for reduc- 
ing and monitoring risks. These are tasks undertaken to reduce the 
likelihood or impact of supply chain disruptions. Monitoring 
includes watching changes in the supply that may increase or 
decrease risks, such as sudden shifts in the availability of raw materi- 
als or the cost of transportation. 


Contingency Plans 


Third, contingency plans should include remediation plans for recov- 
ery from disruptions that do occur. Measures might include shorten- 
ing the period of disruption or minimizing the impact on business 
practices. 


Knowledge Management 


The fourth component of effective supply contingency planning is 
establishing “knowledge management” or learning from disruptions 
in the supply chain that do occur. Knowledge management employs 
postevent audits and analysis of supply chain disruptions to deter- 
mine lessons that can be applied to future activities. 


PHYSICAL SECURITY 


Increasing concern over terrorism has made physical security an 
increasingly relevant concern and an important factor in mitigating 
risks and vulnerabilities.'' Most experts cite three basic means for 
mitigating physical security risks. The first includes adding mechan- 
ical systems. Additional security hardware might include access con- 
trol systems such as electronic card readers and door locks, 
closed-circuit television and other surveillance and monitoring sys- 
tems, biometrics, emergency call boxes and intrusion alarms, as well 
as command and control systems including working stations capable 
of monitoring various security systems. A second category of miti- 
gating measures includes improvements in organization including 
reviewing the adequacy of security staff and procedures as well as 
security policies governing management, tenants, and employees. 
The third element of security mitigation is sometimes referred to as 
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“natural” security, including the architectural elements of facilities 
and the surrounding area. Such elements might include, for example, 
removing trash cans during heightened periods of alert to limit the 
risk that they might be used as drops for improvised explosive 
devices. 

Experts also agree that regular security surveys and assessments, 
implementing practical cost-effective measures, developing easily 
understood policies and procedures, and periodic training for 
employees and security staff are central to establishing security miti- 
gation measures. For example, only about 1 percent of the triggering 
of automatic alarms represents actual emergencies or intrusions. The 
remainder results from mechanical faults, human error, or the disre- 
gard of established security procedures. Thus, establishing effective 
maintenance and education programs are essential for reducing the 
number of false alarms and ensuring that security personnel appro- 
priately respond to automatic warnings. 


INFORMATION TECHNOLOGY 
CONTINUITY AND RECOVERY 


Protecting data and the information technology systems that support 
business practices continues to be an increasingly important compo- 
nent of private-sector contingency programs. The current trend in 
information technology continuity and recovery is to focus on the 
“survivability” of systems. Survivability is usually defined as the 
capability of a system to fulfill its mission in the presence of cyberat- 
tacks, physical disruptions, failures, or accidents.!? Rather than pro- 
tecting the computer system per se, contingency planning focuses on 
security of the information and the capability to conduct specific mis- 
sion critical business practices, such as billing or inventory control. 
Businesses of all sizes will find a plethora of vendors, consultants, 
and support services offering assistance in planning and implementing 
information technology contingency programs. For example, some 
vendors provide hot sites, an operationally ready data center that could 
serve as an alternative computer center for key business activities. The 
use of hot sites, particularly for financial firms, continues to grow. 
According to one survey from 1982 to 2004 over 582 successful business 
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recoveries have been conducted at 25 different hot sites throughout the 
United States. 

Another tool becoming increasing relied on by industry is quick 
shipping, the emergency shipment of computers from third-party leas- 
ing vendors to immediately replace lost equipment. Some companies 
also contract for small portable computer sites or mobile emergency 
office suites that can be delivered to the work location. Finally, many 
vendors offer various PC-based continuity and disaster recovery 
planning tools or consulting services to assist in the development and 
implementation of contingency plans. 


CHAPTER SUMMARY 


This chapter emphasizes the importance of business contingency 
planning. Good planning is based on a disciplined planning process 
directed by key leaders and managers. As with critical infrastructure 
protection activities, risk management is an important tool for plan- 
ning preparedness activities. 


CHAPTER QUIZ 


1. Why should companies undertake contingency planning? 

2. What effect did the September 11 attacks have on how busi- 
nesses viewed the importance of contingency planning? 

3. What is the most important step in contingency planning? Why? 

4. Why is risk management important? 
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CHAPTER 


1/ 


PUBLIC AWARENESS AND 
PERSONAL AND FAMILY 
PREPAREDNESS 


Simple Solutions, 
Serious Challenges 


All Americans should begin a process of learning about potential threats so 
we are better prepared to react during an attack. While there is no way to 
predict what will happen, or what your personal circumstances will be, there 
are simple things you can do now to prepare yourself and your loved ones. 


U.S. Department of Homeland Security, www.ready.gov 


CHAPTER OVERVIEW 


There are many simple and inexpensive precautions that Americans 
can take to help fight terrorism, prevent themselves from becoming 
the victim of a terrorist strike, or mitigate the effects of an attack. The 
far greater challenge is getting individuals to undertake these meas- 
ures. Individuals, families, and households have little propensity to 
care about disasters before they occur. Everyday concerns will always 
far outweigh preparing for a terrorist attack. 

This chapter outlines the difficulties faced in getting individuals to 
adopt personal preparedness and security measures. It also describes 
the means to alert citizens to take preparedness measures. Finally, it 
describes practical measures that should be taken. 
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CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Understand why it is difficult to get individuals to adopt per- 
sonal preparedness measures. 


2. Understand the limitations of current risk communications 
systems. 


3. Describe critical preparedness activities that individuals 
should adopt. 


Know what should be in a disaster preparedness kit. 


Describe individual measures that can be taken to combat ter- 
rorism. 


THE PREPAREDNESS CHALLENGE 


Disasters happen in America every day. Yet, few of us prepare for 
them. That’s a problem. Convincing Americans to prepare for disas- 
ters, any kind of disasters, is no easy task. The disasters of 9/11 
largely happened at the workplace, and physical damage did not 
extend far beyond the confines of the attack site. America might not 
be so lucky next time. 


There is a considerable body of research suggesting that many indi- 
viduals change patterns of behavior or take precautionary measures 
in preparation for disasters only after they have had some personal 
experience with that threat. Additionally, the perceived need for pre- 
paredness recedes as the event becomes more remote.! Given that few 
Americans have experienced, or are likely to experience, a terrorist 
attack, such findings do not bode well for convincing a significant 
number of Americans to take commonsense precautions in anticipa- 
tion of a terrorist attack over threat periods that may span several 
years between major attacks. 

The diverse character of the American public significantly exacer- 
bates the challenge of promoting individual preparedness. 
Differences in socioeconomic status, gender, race, ethnicity, age, cul- 
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Value of 
Preparedness 


ture, and language all affect an individual’s predisposition to under- 
take preparedness. 


Nevertheless, personal preparedness is vitally important. If a disaster 
occurs, local responders may not be able to reach all the affected pop- 
ulation immediately, or they may lack the resources to address every 
problem or concern. Basic services such as electricity, gas, telephones, 
or sewage may not be available or people may be forced to evacuate 
their homes. When individuals can care for themselves, they may 
greatly reduce the prospects for life-threatening illness or injury and 
limit the losses that occur in the wake of a tragedy. In addition, being 
prepared and understanding how to respond will also reduce fear 
and anxiety, important for both short- and long-term recovery. 

While the prospects for encouraging families to undertake pre- 
paredness measures are daunting, the payoff could be substantial. 
There are many popular assumptions, largely influenced by television 
or disaster movies,” suggesting how people will react in the face of dis- 
asters. These are largely myths. According to a survey of behavioral 
science research, panic during community disasters is extremely rare. 
Panic flight only occurs in extreme situations, such as fleeing fires in 
confined spaces like narrow hallways. Nor do people tend to act 
dazed or helpless in the aftermath of tragedy or turn on another for 
their self-preservation. Rather in the aftermath of tragedy people will 
tend to look after themselves and actively assist neighbors and kin.’ 

Given that local communities are generally likely to act positively 
toward a disaster situation, taking even simple measures recom- 
mended by emergency preparedness professionals is likely to have a 
dramatic impact on limiting the extent of damage and casualties and, 
equally important, allowing emergency responders to focus their 
assets on the most life-threatening problems. 


RISK COMMUNICATIONS 


Research does suggest that individuals are far more likely to take 
action when they are forewarned and they perceive the threat is fairly 
certain and imminent. One of the most significant challenges for 
authorities in attempting to mobilize public preparedness is crafting 
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and communicating appropriate warnings that will motivate individ- 
uals to prepare for a terrorist attack. 


There is no single, integrated national system of communicating ter- 
rorist risks to the general public. A national Homeland Security 
Advisory System (HSAS) was established by President Bush in March 
2002. The U.S. attorney general assumed overall responsibility for 
implementing the system. Subsequently, the Homeland Security Act 
of 2002 placed responsibility for early warning activities squarely on 
the shoulders of the secretary of the Department of Homeland 
Security (DHS). Section 201 of the law also assigns the Directorate of 
Information Analysis and Infrastructure Protection ([AIP) the respon- 
sibility for administering the HSAS. 

The HSAS employs a series of color codes to designate various lev- 
els of national preparedness in anticipation of a terrorist attack. 
Associated with each threat condition are a range of suggested pro- 
tective measures (such as implementing various contingency plans), 
with federal, state, and local agencies responsible for developing and 
implementing their own specific response activities.* 

The primary purpose of the HSAS is to direct federal preparedness 
activities, though it is widely perceived by many as primarily a warn- 
ing system for the general public. That’s a problem. The HSAS does 
not meet all the expectations of an effective public alert system. 

Public alerts must be credible, specific, understandable, and action- 
able by individuals.” Arguably, the change in color code, which dom- 
inates the public perception of what the HSAS represents, is none of 
these. For example, when the national alert level is changed, local 
officials may take no publicly discernable action because they have no 
specific information of threats in their area. In February 2003, when 
the federal government changed the national threat condition to code 
orange, the governor of Hawaii chose to maintain a blue level of alert. 
The governor of Arizona suggested that Arizona might do the same, 
depending on threats to the state. For average citizens, these 
responses are incongruous, raising questions about the overall credi- 
bility of the HSAS. 

The lack of specificity over the nature of the alert and the absence of 
clear guidance on what actions need to be taken by individual citizens 
is problematical as well. The American Red Cross, recognizing the pub- 
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The Emergency 
Alert System 


lic confusion over the color-coded system, has issued its own guide- 
lines for preparedness by the general public.” While the measures it rec- 
ommends are relatively simple and straightforward, absent more 
specific information, it is unlikely they will motivate significantly 
greater numbers of people to undertake preparedness measures. 


There are national systems to provide more targeted emergency alerts. 
The Emergency Alert System (EAS) is one of two national systems for 
providing specific alerts and early warnings to the general public. The 
other is the National Oceanic and Atmospheric Administration’s 
Severe Weather Radio System operated by the National Weather 
Service. The EAS replaced the Cold War-era Emergency Broadcast 
System and its monthly announcements “This is a test of the 
Emergency Alert System—this is only a test... .” EAS provides the 
means with the capability to address the country during emergencies. 
If used at the national level, only the president, or his representative, 
can activate EAS; however, state and local governments can also use 
the system. All AM, FM, and TV broadcast stations participate in EAS 
as well as cable systems and wireless cable networks. EAS codes can 
also travel on nonbroadcast frequencies and telephone lines and pro- 
vides the option to allow new specially equipped cellular phones, 
pagers, and eventually Internet broadband messages. 

EAS messages could include identification of precautionary protec- 
tive actions for special populations (school children and transporta- 
tion-dependent individuals) or by location (public parks, beaches, 
etc.); identification of protective actions (if any) for the general public 
using familiar landmarks (political jurisdictions, major highways, 
rivers, railroads, zip codes, etc.); identification of evacuation routes; 
identification of reception centers for radiological monitoring of evac- 
uees and congregate care centers for lodging of evacuees; instructions 
on how to maximize protection when sheltering (remain inside, close 
all windows and doors, shut off any forced air heating or cooling sys- 
tems); provision of information addressing and responding to false or 
misleading rumors, as well as the provision of rumor control numbers 
to the public; ingestion-related instructions and information (how to 
avoid ingesting contaminated particles); reminders on what to take 
along when evacuating; and pet information. EAS messages are 
required to be under two minutes in duration. 
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A sample message might be 


This is an Emergency Alert System announcement concerning a 
General Emergency at the Duckworth Nuclear Power Plant 
located near Duckworth, Virginia. The Commonwealth of 
Virginia Division of Emergency Services, with the authority of 
Governor Gerald Robinson, issues this message: 

At 10:30 this morning, Governor Gerald Robinson issued an 
Emergency declaration in response to this situation. Because of the 
potential for release of radioactivity from the Duckworth Nuclear 
Power Plant, Governor Robinson has ordered the evacuation of 
public and private schools near the plant. The Governor also 
requests that all persons within about 5 miles of the plant remain 
inside, close all windows and doors, and shut off any forced air 
heating or cooling systems. Please stay tuned to this station for 
additional information. Also refer to your red and blue “Public 
Awareness” brochure or to Page X of the Duckworth Telephone 
directory for further information. This concludes this broadcast.® 


An EAS message such as this would be followed by more detailed 
special news broadcasts. 

Today, the EAS is primarily used to disseminate weather warnings 
and Amber (abducted child) alerts. While the system is well-estab- 
lished, there are concerns over the security, funding, and manage- 
ment of the EAS, which is shared by the Federal Communications 
Commission (FCC), National Weather Service, the DHS, states, and 
volunteer state and local EAS committees.” Nor is participation in the 
EAS mandatory for state and local governments. 

In addition to the EAS there are a plethora of state and local emer- 
gency systems ranging from bells and sirens to automatic calling 
services. There are also a wide variety of commercially available alert 
systems. Still more likely, many individuals will receive risk commu- 
nications through the filter of the public media via radio, cable news, 
or the Internet. 


Many residents are more than likely to receive disaster information 


from the public media via broadcast or cable television, radio, or the 
Internet. In the United States, for example, the dramatic drop in death 
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The Challenges 
of Risk 
Communication 


tolls as the result of tornadoes over the last two decades has been 
attributed in part to the more effective use of warnings issued over 
the public media. 

Public media outlets can be used to disseminate disaster prepared- 
ness and response information, stimulate volunteerism (such as giv- 
ing blood and food), and counteract rumors and inaccurate 
information.1? 


Every form of alert system has both advantages and disadvantages in 
terms of reaching its intended audience and ensuring the message is 
understood. Of all the means available, telephonic alerts are consid- 
ered the most accurate, dependable, and capable of reaching most 
sectors of the population. 


Lack of Specific Information 


Even with appropriate means to transmit risk communications, pro- 
viding early warning of terrorist attacks is especially problematic. 
Unlike weather alerts, for example, authorities may lack sufficient 
specific information or the time to craft a warning that elicits an 
appropriate public response. 


Lack of Practice 


Another challenge is that many authorities are simply not well prac- 
ticed in risk communications. It is often not clear to them what infor- 
mation is required by different segments of the population, and it is 
often difficult to get timely feedback that citizens are actually receiv- 
ing and acting on the information." 


Lack of Capacity 

There are not adequate systems for individuals to query officials dur- 
ing times of emergency to ask questions or clarify instructions. People 
will generally call the organizations they are most familiar with (such 
as the local police station) rather than the entity with the right infor- 
mation and will most certainly, in the event of a major disaster, over- 
load officials with their inquiries. For example, within the United 
States, the three-digit telephone number “911” has been designated as 
the universal emergency number. About 96 percent of the United 
States is covered by some form of 911 system. The FCC has also insti- 


—P— 


Sauter ch17-18 3/21/05 12:59 PM Page 358 5 


358 


Principles of 
Effective 
Communication 


PART 3 * HOMELAND SECURITY 


tuted a program to require wireless carriers to provide 911 services. 
Efforts are also under way to provide 911 access using voice over the 
Internet protocols. But 911 services could be overwhelmed during a 
large-scale emergency. 


Limitations of the Media 


The use of the media as an alert system may also be a challenge. Most 
media members want to be professional and accurate. On the other 
hand, in today’s real-time news environment, they are also under a 
great deal of pressure to get stories out fast and make them as dra- 
matic and timely as possible. Rather than serving as a responsible 
conduit for risk communications, the media may exacerbate the prob- 
lem with inaccurate or misleading information. Reporters, for exam- 
ple, may lack the knowledge or expertise to properly cover an event. 
The media can also control how much time is devoted to a subject 
matter and to some extent can dictate what types of subject matter 
public officials can discuss on the air. Studies also show that the 
amount of media coverage of a disaster can directly affect audience 
response, prompting the public to take preparedness measures or 
exacerbating anxiety and stress.” 


Regardless of the means of delivery, the key to successfully motivat- 
ing the public to undertake preparedness or response measures is to 
adhere to the principles of effective communication. These are essen- 
tial for communicating messages both directly to the public and 
through the media to a general audience. 


Clear Goals 


Communication efforts must have clear goals and key messages to 
support them. For example, a goal of “educating the public on bioter- 
rorism and preparing them for any eventuality” is not realistic; 
informing people of specific dangers is a more achievable goal. 


Consistent Message 

Another fundamental of effective risk communications is to “stay on 
message.” In other words the message should be focused, consistent, 
and received by the intended audience. 
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Appropriate Information 


Information must be timely, accurate, and simple to understand; this 
is particularly important for communicating complex or scientific 
data. It is equally important to acknowledge uncertainty. Loss of cred- 
ibility will significantly degrade effectiveness. If the audience does 
not perceive communications as credible, they will be unlikely to act 
on them. Key factors that the public assesses in judging credibility are 
empathy and caring, competence and expertise, honesty and open- 
ness, and dedication and commitment. 1 


ISSUES: 
MYTHS 


Popular myths often interfere with establishing effective risk com- 
munications. One is that warnings are more likely to alarm than 
calm people. In fact, research suggests the opposite is true. When 
individuals receive information, can express concern, ask ques- 
tions, and receive accurate answers, they are far more likely to act 
in a positive manner and experience less stress and apprehension. 

Another myth is that the form of risk communications is less 
important than the content. In contrast, research suggests that 
the process of structuring and transmitting the message is as 
vital as the content of the information. 

Finally, many believe that issues that arise during a crisis or 
disaster may be too difficult for the public to understand. 
However, while individuals may lack the knowledge to grasp 
technical issues, many of the key issues they must understand 
and the precautions needed to prepare or respond to a terrorist 
attack can be explained in plain, understandable language.'* 


1. Are there other myths concerning personal security and 
preparedness? 


2. What is the best way to combat myths? 


3. What can be done to get individuals to better prepare for 
terrorist threats? 
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INDIVIDUAL, FAMILY, AND 
COMMUNITY ANTITERRORISM MEASURES 


Personal antiterrorism measures for the most part parallel the recom- 
mendations by public safety experts for preventing crime. The basic 
principles are taking steps to properly secure the home, workplace, 
and personal property; being alert and aware of surroundings and 
alert to conspicuous or unusual behavior; reporting suspicious activ- 
ities through appropriate channels; supporting Neighborhood Watch 
programs; creating liaisons between neighborhood groups and local 
law enforcement authorities; and developing a system to disseminate 
information rapidly throughout the neighborhood. 15 

Encouraging individuals to adopt good security practices requires 
that they understand the threat and perceive it as relevant to their 
community. Thus, learning about the nature of terrorism will increase 
the likelihood that good security practices are adopted. Individuals 
must understand how terrorists look for visible targets where they 
can avoid detection before or after an attack such as international air- 
ports, large cities, major international events, resorts, and high-profile 
landmarks. Communities must understand the different types of ter- 
rorist weapons including explosives, kidnappings, hijackings, arson, 
and shootings and that the best practice is to deal with a terrorist inci- 
dent by adapting many of the same techniques used to counter crim- 
inal activity. In addition, there are specific skills and practices that can 
serve as useful antiterrorism measures. 


The most useful individual antiterrorist precautions are knowing the 
techniques to respond to bomb threats and suspicious packages, vehi- 
cles, and individuals; the most likely terrorist threats that may be 
encountered; and ones where the public can play a significant role in 
helping to deter, prevent, or mitigate terrorist acts. 


Bomb Threats 


If a bomb threat is received, individuals should know how to prop- 
erly respond. Try to get as much information from the caller as possi- 
ble. Keep the caller on the line and record everything that is said. 
Notify the police and the building management. 
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Individuals should know how to respond to terrorist bombings of 
high-rise buildings or public conveyances such as subways. These are 
often favorite bombing targets for terrorists. Individuals should learn 
where emergency exits and staircases are located. Individuals should 
think ahead about how to evacuate a building, subway, or congested 
public area in a hurry. They should also know where fire extinguish- 
ers are located and how to use them. 

In the event of an incident, to avoid being hurt by debris that might 
be loosed by an explosion, individuals should take cover against a 
desk or table. Move away from file cabinets, bookshelves, or other 
things that might fall. Face away from windows and glass. Move 
away from exterior walls. 

If evacuation of a high-rise building or subway is required, do not 
use elevators. Elevator shafts could act as a chimney spreading fire or 
contamination throughout a structure. Rather, building residents 
should go down the stairwells staying to the right to allow emergency 
workers to come up. 


Suspicious Packages 


Law enforcement agencies have identified a number of characteristics 
that might indicate a suspicious package containing a bomb or other 
hazardous material. Items to watch for include inappropriate or unusual 
labeling; excessive postage; handwritten or poorly typed addresses; mis- 
spellings of common words; strange return address or no return address; 
incorrect titles or title without a name; not addressed to a specific person; 
marked with restrictions, such as “Personal,” “Confidential,” or “Do not 
x-ray”; marked with any threatening language; or postmarked from a 
city or state that does not match the return address. 

Suspicious packages can also be identified by appearance. 
Packages should be inspected for powdery substances felt through or 
appearing on the package or envelope; oily stains, discolorations, or 
odors; lopsidedness or unevenness; excessive packaging material 
such as masking tape, string, etc; excessive weight; and protruding 
wires or aluminum foil. Packages should also be checked for suspi- 
cious sounds like ticking. 

If an individual encounters a suspicious package, the following 
steps are recommended. Put the package or envelope down on a sta- 
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ble surface; do not sniff, touch, taste, or look closely at it or at any con- 
tents that may have spilled. Alert others in the area. Leave the area 
and close any doors. If possible, shut off the ventilation system. 
Anyone who handled the package should immediately wash their 
hands with soap and water to prevent spreading potentially haz- 
ardous material. Notify a supervisor, security officer, or a law enforce- 
ment official. Make a list of persons who were in the room and 
persons who also may have handled this package or letter. 


Responding to Suspicious Activity 

Individuals must use their best judgment to identify activities that are 
extraordinary or suspicious. Suspect activities might include looking 
lost and/or wandering around; appearing to be conducting surveil- 
lance (using cameras/video); abandoning an item and leaving the 
area quickly; or openly possessing a weapon or any prohibited or 
dangerous item. 

In all cases, the appropriate action is to notify a responsible person 
such as a superior, security official, or local enforcement. Suspected 
terrorist activities can also be reported to the FBI’s hotline at 
tips.fbi.gov. 


PRINCIPLES OF 
EMERGENCY PREPAREDNESS PLANNING 


Many of the measures applicable to preparing the general public to 
respond to any kind of a terrorist attack are the same as those neces- 
sary to respond to other human-made or technological disasters. 
Thus, preparing for a terrorist strike is little different from getting 
ready to deal with virtually any kind of public emergency. Almost 
none of these efforts require specialized equipment or training. For 
the most part, emergency planning professionals eschew stockpiling 
specialized equipment such as gas masks or antibiotics, since most 
individuals lack the training and experience to maintain and use 
these items appropriately and safely. Rather, extensive research sug- 
gests that simple and commonsense precautions are usually effective 
at protecting individuals in most cases until emergency response 
services can be brought to bear. 
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Disaster 
Supply Kits 


There are many commercial and public service products to assist in 
emergency planning and education. The most readily available 
source of information is the American Red Cross. Individuals can 
obtain copies of the disaster education material from a local Red 
Cross chapter. They can also be consulted on the national Red Cross 
Web site or a special Web site established by the Department of 
Homeland Security at www.ready.gov. 

Virtually all disaster preparedness guides include the following 
basic components: a disaster supply kit, a family emergency and com- 
munication plan, and a shelter-in-place or evacuation scheme. 


Fundamental to any personal response is the establishment of an emer- 
gency cache of supplies. These are items that will allow individuals to 
limit the potential for injury or illness. Federal Emergency Management 
Agency (FEMA) recommends maintaining sufficient supplies to survive 
for three days. Items should be kept together in an easy-to-carry con- 
tainer, such as a trash bag, backpack, or duffle bag, not just so they are 
easy to find in the event of an emergency, but also to ensure that they 
are easily transportable in case evacuation is required. Disaster pre- 
paredness kits should be prepared for the workplace as well as the 
home. In addition, individuals should include a smaller disaster supply 
kit in the trunk of their cars. The six basics recommended for home dis- 
aster kits include water, food, first aid supplies, clothing and bedding, 
tools and emergency supplies, and special items. 


Water 


Stockpiling water must be an absolute rule priority. Water is not only 
essential for sustaining life and helping the body heal itself in case of 
injury or illness, but necessary for sanitation. Proper hydration will 
help individuals think and act and maintain stamina, all essential 
attributes for responding to what may be stressful, demanding, and 
chaotic conditions in the aftermath of an attack. A rule of thumb is 
one gallon of water per person per day for drinking, food prepara- 
tion, and sanitary purposes. Physical condition, high altitude, and 
hot weather may significantly increase fluid requirements. For exam- 
ple, children, nursing mothers, and injured or ill individuals may 
need more. Water should be stored in clean, nontoxic, plastic con- 
tainers rather than in something that might decompose or break like 
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cardboard milk containers or glass. Stored water should be changed 
every six months. Containers should be sealed to limit contamination. 


Food 


Food stored for emergency situations should not require refrigera- 
tion, cooking, or extensive food preparation. These supplies should 
be stored in a cool, dry place in tightly sealed containers and can 
include the staples normally found on a typical kitchen shelf, such as 
canned food or packaged goods. In the wake of an attack, individuals 
should take care to clean containers and food utensils before con- 
suming food to ensure that they do not inadvertently consume con- 
taminated particles that might be in the air. Unlike water, food, except 
for children and pregnant women can be rationed, with individuals 
surviving on half their normal intake. 


FROM THE SOURCE: 


RED CROSS RECOMMENDED DISASTER AID KIT 


Flashlight with extra batteries 
Use the flashlight to find your way if the power is out. Do 
not use candles or any other open flame for emergency 
lighting. 
Battery-powered radio 
News about the emergency may change rapidly as events 
unfold. You also will be concerned about family and 
friends in the area. Radio reports will give information 
about the areas most affected. 


Food 

Enough nonperishable food to sustain you for at least one 
day (three meals), is suggested. Select foods that require 
no refrigeration, preparation, or cooking, and little or no 
water. The following items are suggested: 

Ready-to-eat canned meals, meats, fruits, and vegetables. 

Canned juices. 

High-energy foods (granola bars, energy bars, etc.). 
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Water 
Keep at least one gallon of water available, or more if you 
are on medications that require water or that increase 
thirst. Store water in plastic containers such as soft- 
drink bottles. Avoid using containers that will decom- 
pose or break, such as milk cartons or glass bottles. 


Medications 

Include usual nonprescription medications that you take, 
including pain relievers, stomach remedies, etc. 

If you use prescription medications, keep at least three-day’s 
supply of these medications at your workplace. Consult 
with your physician or pharmacist on how these medica- 
tions should be stored, and your employer about storage 
concerns. 


First aid supplies 
If your employer does not provide first aid supplies, have 
the following essentials: 
(20) adhesive bandages, various sizes 
(1) 5" x 9" sterile dressing 
(1) conforming roller gauze bandage 
(2) triangular bandages 
(2) 3 x 3 sterile gauze pads 
(2) 4 x 4 sterile gauze pads 
(1) roll 3" cohesive bandage 
(2) germicidal hand wipes or waterless alcohol-based 
hand sanitizer 
(6) antiseptic wipes 
(2) pair of large medical-grade nonlatex gloves 
Adhesive tape, 2" width 
Antibacterial ointment 
Cold pack 
Scissors (small, personal) 
Tweezers 
CPR breathing barrier, such as a face shield 
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Tools and Supplies 

Emergency “space” blanket (Mylar). 

Paper plates and cups, plastic utensils. 

Nonelectric can opener. 

Personal hygiene items, including a toothbrush, toothpaste, 
comb, brush, soap, contact lens supplies, and feminine 
supplies. 

Plastic garbage bags, ties (for personal sanitation uses). 

Include at least one complete change of clothing and 
footwear, including a long-sleeved shirt and long pants, 
as well as closed-toed shoes or boots. 

If you wear glasses, keep an extra pair with your workplace 
disaster supplies. 


First Aid Supplies 


Recommendations on what first aid supplies should be stockpiled 
vary. The Red Cross has issued a list of suggested medical supplies. 
These include items normally found in most commercially available 
first aid kits or ones that can be purchased in any grocery store or 
pharmacy. In the wake of a disaster, the greatest concern of emer- 
gency responders is addressing potentially life threatening illness or 
injury, until professional medical service can be provided. These 
actions include preventing shock, stopping bleeding and maintaining 
an appropriate level of body fluids, and limiting the risk of infection 
or contamination. As such, the first aid supplies are principally those 
that can be used to stop bleeding, clean skin and wounds, and pro- 
vide comfort. Medications recommended are nonprescription, ones 
that can be safely administered without expert medical advice, such 
as pain-relief, antidiarrhea, or stomachache tablets. 


Clothing and Bedding 

These items can be important for preserving heath and safety after an 
attack. For example, clothing may be contaminated by particles or 
debris. Wet clothing will make individuals more vulnerable to illness. 
Bedding may be required to help treat shock. Safety clothing may be 
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required to recover injured people or remove damage. Individuals 
should have one complete change of clothing and footwear for each 
member of the household, including sturdy work shoes, gloves, hats, 
socks, underwear, sunglasses, and rain gear. Bedding could include 
blankets or sleeping bags. 


Tools and Emergency Supplies 


Individuals should assume that public services may be disrupted by 
a terrorist attack and that they will have to go without television, 
Internet services, telephony, electricity, and sewage. Thus, tools and 
emergency supplies are necessary to get emergency information and 
provide basic services. As a result, recommended lists include items 
such as portable battery-powered radios and batteries, signal flares, 
matches, battery-operated clocks, manual can opener, paper and 
pens, and sanitation and hygiene items like bleach, insect repellent, 
soap, toothpaste, and toothbrushes. Also recommended are tools and 
supplies that might be useful for emergency repairs to limit damage 
or risk of contamination, including wrenches, pliers, and shovels; eye 
protection; dust masks; duct tape, plastic sheeting, and scissors; and 
fire extinguishers. 


Special Items 


The most critical items are those needed to meet the special needs of 
individuals who would be at higher risk including older persons, 
children, and pregnant women. Equally vital are preserving impor- 
tant family documents. These might include wills, insurance policies, 
contract deeds, stocks and bonds, passports, social security cards, 
immunization records, bank account numbers, credit card account 
numbers and companies, inventory of valuable household goods, 
password information, household inventories, important telephone 
numbers, family records (birth, marriage, death certificates). These 
materials should be kept in a sealed, waterproof container that can be 
easily transported. 


Preparedness experts agree stockpiling supplies alone is not sufficient. 
Families may not be together when disaster strikes, so they will 
require a plan on how to contact one another as well as relatives and 
associates. Families also need to review what needs to be done in dif- 
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ferent situations and what local plans and services are in place to 
assist them in times of emergencies. 

The first step in crafting individual plans is to gather relevant infor- 
mation. Individuals should find out what kinds of disasters, both nat- 
ural and human-made, are most likely to occur in the local area and 
how residents will be notified of impending emergency. The local 
chapter of the Red Cross is usually the best source of this information. 
Individuals should also inquire about site-specific emergency plans at 
schools, day-care providers, workplaces, neighborhoods, public 
transportation, apartment buildings, and other places where individ- 
uals spend most of their day. 

Communications planning includes ensuring all family members 
have means of contacting one another. Often during an emergency it 
is easier to contact someone outside the disaster area. Many plans call 
for contacting an out-of-state friend, relative, or associate. Plans also 
call for picking a safe meeting place located outside the neighborhood 
or workplace where family members can assemble if they cannot 
return home. 

A most critical element of the plan is to meet with family members 
and coworkers to discuss what kinds of emergencies might occur and 
how response will be implemented. Finally, the plan should be prac- 
ticed. 


One of the most critical components of emergency response is the 
decision of whether to shelter in place or evacuate. In most cases, 
security professionals recommend that unless individuals are in 
immediate physical danger (fires, explosions, or contamination 
released inside a building may require evacuation), then it is safer to 
remain indoors. Fires, conventional explosions, as well as biological, 
radiological, and chemical incidents may all release dangerous con- 
taminants into the atmosphere. Sheltering in place is perhaps the best 
method to avoid any hazards that may be present at the scene of a dis- 
aster, including dangerous materials that might be in the air or a 
debris cloud. The best safety practice is to limit exposure to contami- 
nation by remaining indoors. 

Sheltering in place means taking refuge in a small, interior room or 
basement with no or few windows in the house, school, or workplace. 
In the case of a chemical threat, an aboveground shelter is preferable 
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Special Needs 


since some chemicals are heavier than air and will sink to lower lev- 
els. In addition, other precautions might include closing windows, 
vents, and flues, and sealing cracks around doors and vents with 
plastic sheeting and duct tape. Sheltering-in-place under these condi- 
tions is usually required for only a few hours, so there is little threat 
of suffocating. 

Unless individuals are under immediate physical danger, they 
should only evacuate under an order from local government officials. 
It is, therefore, essential to listen to local radio and television reports 
when disaster threatens. If evacuation is required, residents should 
know how to shut off electricity, gas, and water supplies at main 
switches or values. Residents should secure their homes, let their out- 
of-state points of contact know where they are going, and evacuate 
with their disaster preparedness kits using evacuation routes recom- 
mended by the authorities. In an evacuation, individuals will have to 
be mindful that local authorities could make mistakes or misjudge the 
situation. In the absence of instructions or if individuals are threat- 
ened or endangered, they will have to use their best judgment. 


Preparedness plans must give special consideration to persons with 
disabilities or special needs. For example, the hearing impaired or 
non-English speaking may require special arrangements to receive 
emergency warning information. Mobility impaired individuals or 
households with single working parents may require assistance in 
responding to disasters or getting family members to shelters. People 
with special dietary or medical needs should have specially tailored 
emergency supplies. Children, older individuals, and persons with 
depressed immune systems as a result of illness, such as HIV/AIDS, 
or medical treatment, like chemotherapy, may require additional 
attention when at risk of injury or contagious disease. 

Measures taken to address special needs could include finding out 
about special assistance programs that might be available in local 
communities or registering with the local office of emergency serv- 
ices or fire department, so that needed help can be provided quickly 
in an emergency. Networks of relatives, friends, caregivers, or 
coworkers can be organized to provide aid in the case of an emer- 
gency. People in support networks should know how to operate spe- 
cialized medical equipment or administer medicines. Supplies to 
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support specialized equipment like batteries for wheelchairs, diapers 
for children, catheters, or food for hearing and guide dogs should be 
stockpiled. Individuals may also wear medical alert tags or bracelets 
to help identify their disability. Those requiring prescription medica- 
tions might consider maintaining a three-day supply at their work- 
place in case they cannot get home during an emergency. A physician 
or pharmacist should be consulted about stockpiling medication to 
ensure issues such as storage requirements or expiration dates are 
addressed. 


INDICATIONS OF A TERRORIST ATTACK 


Obvious signs of physical destruction will not mark all disasters. 
Symptoms of an event involving hazardous chemical materials might 
include observing a large number of people in physical distress, such 
as vomiting, convulsions, or unconsciousness. The presence of 
strange or out-of-place odors, such as the smell of new-mown hay in 
a subway or dead birds or small animals might also indicate the 
release of dangerous chemicals. Incidences of biological or radiologi- 
cal agents might be far less obvious to observe. The initial onset of 
effects may resemble something similar to that of a cold or flu. 


If a terrorist attack does occur, the Red Cross recommends a standard 
response that would be applicable to any kind of emergency situa- 
tion. Remain calm and be patient. Follow the advice of local emer- 
gency officials. Listen to radio or television for news and instructions. 
If the disaster occurs in proximity, check for injuries. Give first aid 
and get help for seriously injured people. Care should be taken to 
avoid eating or drinking anything that might be contaminated with 
hazardous material. Check for damage using a flashlight. Do not light 
matches or candles or turn on electrical switches. Check for fires, fire 
hazards, and other household hazards. Sniff for gas leaks, starting at 
the water heater. If a gas leak is suspected, turn off the main gas valve, 
open windows, and get everyone outside quickly. Shut off any other 
damaged utilities. Confine or secure your pets. Implement the family 
emergency communications plan, and check on neighbors or cowork- 
ers, especially those who are elderly or disabled. 
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CHAPTER SUMMARY 


For a variety of social, cultural, economic, and psychological reasons 
it is difficult to get individuals to undertake personal preparedness 
and security measures. In addition, the national systems for risk com- 
munication are inadequate. These limitations aside, there are simple, 
inexpensive, and effective precautions that individuals can undertake 
to improve their personal security. Many of these measures are all- 
hazards; in other words, they are effective for all kinds of disasters 
from fires to WMD attacks. 


CHAPTER QUIZ 


1. Why is it difficult to get people to prepare? 


2. Why is it important to have individuals undertake personal 
security and preparedness measures? 


3. List the categories of items in an emergency preparedness kit. 
4. How does a family communication plan work? 


5. How can individuals help combat terrorism? 
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the Evolving Terrorist Threat 
While Balancing Safety 

and Civil Liberties 


America is prepared but can become better prepared. 


Governor James Gilmore III, Chairman of the Advisory Panel to 
Assess Domestic Response Capabilities for Terrorism Involving 
Weapons of Mass Destruction 


CHAPTER OVERVIEW 


This chapter offers a glimpse of what Americans may face in the 
future both in terms of new threats and new capabilities to counter 
them. It discusses how both transnational and domestic terrorism 
may evolve in the future. The chapter also looks at possible changes 
in tactics terrorists might adopt to make their attacks more deadly, 
even without obtaining WMD materials. It also looks at significant 
technological innovations that might be adopted to provide better 
homeland security or create even more insidious threats. Finally, it 
examines organizational reforms that might be undertaken to 
improve security. 
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CHAPTER LEARNING OBJECTIVES 


After reading this chapter, you should be able to 


1. Understand how transnational and domestic terrorism may 
change in the future. 


2. Understand the role of technology in shaping the future of 
homeland security. 


3. Understand why the structure of national homeland security 
organizations may change in the future. 


THE FUTURE OF TERRORISM 


There is little question but that the terrorist threats the United States 
will face in the years ahead will be different from the al-Qaida net- 
work that launched the September 11 attacks. Global terrorism is in 
transition. Terrorist sanctuaries have been destroyed. Leaders cap- 
tured. Money seized. New homeland security regimes and counter- 
terrorism measures have been put in place. Now the terrorists are 
trying to adapt—sponsoring attacks by others, recruiting, fund-rais- 
ing, inspiring religious and ethnic hatred, and debating new strate- 
gies for attacking the West as well as regimes in the Middle East.! 

How terrorism will evolve in the future is far from certain. The war 
on terrorism, like all wars, is a contest of action and counteraction that 
can’t be predicted with certainty. There are no rule books or guide- 
lines that can provide a guaranteed blueprint for success. While the 
future will always remain a foreign country, there are emerging 
trends and wild cards that could significantly turn the course of 
future events. Two of the most significant could be a resurgence of 
domestic terrorism and a new terrorist tactic—weapons of mass dis- 
ruption. 


While it is far from clear how terrorist organizations will evolve in the 
future, there is one aspect of the threat that may not be receiving suf- 
ficient attention as an emerging danger, the threat of domestic terror- 
ism. While the events of September 11 focused America’s attention on 
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foreign foes, concern over domestic groups that perpetrate violence 
should not be ignored. Before the 9/11 attacks, the most deadly strike 
on U.S. soil by a nonstate actor was the bombing of the Alfred P. 
Murrah Federal Office Building, an act carried out by domestic 
extremists. There are many groups that could provide the foundation 
for the next wave of terrorism. By some counts, over 600 groups have 
demonstrated the potential to conduct violent acts with memberships 
ranging from a handful to hundreds.? In addition, individuals and 
small ad hoc groups have shown the capability to launch attacks that 
take lives and destroy or damage property. Today, these groups rep- 
resent lesser dangers than organizations like al-Qaida, but that may 
not always be so. As homeland security measures overwhelmingly 
focus on threats from overseas, enemies may be anxious to seek 
alliances within the United States. Domestic groups that act in sym- 
pathy or as offshoots of transnational networks, extending their reach 
inside the United States, could represent particularly serious future 
security risks. 

In the 1980s the activity level of domestic groups declined signifi- 
cantly and the nature of these factions shifted from predominantly 
left-wing movements that had been involved with the anti-Vietnam 
War movement and civil rights protests to right-wing organizations 
espousing racial supremacy and antigovernment ideology. The activ- 
ities of right-wing groups reached a plateau by the mid-1990s. In the 
last several years, groups associated with animal rights, antiglobal- 
ization, and environmental extremism have been on the rise. For 
example, the FBI has estimated that since 1996 the Earth Liberation 
Front, an ecological terrorist group, has committed 600 criminal acts 
costing over $42 million. Though such groups are primarily respon- 
sible for the increase in terrorist acts since 1999, right-wing extremist 
organizations, which often target people as well as property, are con- 
sidered potentially more formidable and dangerous. 

This pattern of domestic terrorism suggests that it is broadly linked 
to mainstream contemporary political, religious, and social move- 
ments, where small factions have attempted to radicalize broad- 
based, activist social agendas. For complex political and cultural 
movements, like the “antiglobalization” campaign, future threats 
could come from a strange admixture of factions from the right and 
the left. 
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While these groups currently present a notable, but secondary 
class of risk, they can be a significant domestic security problem. 
The greatest danger for the United States is concerted operations by 
multiple groups—domestic organizations, individuals, and 
transnational actors acting together—to maximize the strain on 
intelligence, law enforcement, defense, and consequence manage- 
ment resources. Such a “coalition” attack might also increase the 
range of weapons and tactics available to both foreign and domes- 
tic groups. This cooperation might occur not out of shared motiva- 
tions or planning, but rather out of a desire to achieve the common 
ends of public violence and destruction. Alternatively, it is possible 
that transnational organizations and domestic groups might inten- 
tionally work closely together, driven by ideological motivations or 
for financial gain. 

Cooperation between domestic and foreign groups would not be 
unprecedented. Nor would it be impossible for such alliances to be 
forged without notice. For example, only during the first half of the 
1950s were communist activities in the United States an issue of 
widespread popular concern. Claims of vast domestic spy net- 
works, however, were soon dismissed. Recently, however, searches 
of formerly classified communication intercepts, USA Communist 
Party records, and former Soviet Bloc archives have revealed that 
the American Communist Party’s covert activities from the 1930s to 
the 1950s were far larger and well-organized than most assumed 
and that agents worked in close cooperation with or under the 
direct supervision of Soviet military and intelligence organizations.* 
Thus, while the recent attention given transnational terrorist organ- 
izations and potential aggressor states is not misplaced, over the 
long term the threat of domestic groups can also not be ignored. 


In addition to the many known tactics and methods for conducting 
terrorist attacks, a new danger may appear in the future by enemies 
seeking new ways to inflict mass casualties, even if they cannot 
obtain weapons of mass destruction. Terrorists have never before 
grouped multiple means of attack against multiple locations, but they 
have good reason to consider such tactics as a means for achieving 
greater levels of damage and disruption. Such a strike might be called 
a “weapon of mass disruption.” 
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A weapon of mass disruption would incorporate existing weapons 
and delivery systems. Terrorists could maximize their effects by con- 
ducting orchestrated strikes. These might be several attacks with the 
same kind of weapon striking at several geographically dispersed areas 
to place maximum strain on resources and create a heightened sense of 
vulnerability. Alternatively, an attack might combine different targets 
and weapons into a single coordinated operation at one or several loca- 
tions. By placing the same amount of effort dedicated to several attacks 
into one synchronized operation, an enemy might achieve far greater 
effects than what could be achieved by several disparate attacks. Even 
without inflicting mass casualties, a well-orchestrated series of attacks 
could be a significant threat, in effect creating “mass disruption.” 

A mass attack might include strikes on multiple urban centers in 
relatively close proximity to maximize the difficulty of coordinating 
responses and overtax local resources. For example, an enemy might 
choose to strike Tampa, Florida, a major urban area, as well as the 
home of two critical major military commands. At the same time, 
strikes might hit Orlando, Florida, a relatively dense population area 
that also contains several national entertainment venues including 
Walt Disney World, and Jacksonville, a major urban, port, and indus- 
trial area. These targets might be chosen because the North Florida 
area is untested in dealing with major terrorist strikes. 

Preparatory activities may well pave the way for an attack to 
increase its effectiveness. In the case of the hypothetical Florida attack, 
for example, strikes might be preceded by an arson campaign, setting 
a series of forest fires in the southern part of the state. Forest fires are 
often a serious problem in Florida, and the natural response would be 
to shift assets to deal with the threat. Thus, the bulk of the state’s first- 
responder capabilities might be out of position when the rest of the 
strikes occur. At the same time, small diversionary terrorist strikes 
might also be conducted in other parts of the country to distract 
national responders and slow rapidly dispatching support to the 
actual attack site. Indeed, creating the impression of a national terror 
campaign might make federal and state authorities reluctant to dis- 
patch some resources to the scene. They could be tempted to husband 
assets for subsequent attacks. 

These attacks might target critical infrastructure as a means of mag- 
nifying a strike’s disruptive effects. In the example of the hypothetical 
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North Florida strike, all three cities include seaports, airports, and 
major road systems. Attacks could begin with immobilizing the trans- 
portation networks. Hazardous material at the ports or being trans- 
ported by highway could be hijacked or sabotaged to start the attack. 
Shoulder-fired precision-guided weapons or suicide attacks might 
have the best prospects for penetrating existing security barriers and 
fences. Immediate mass casualties might be inflicted by an arson strike 
on a major fertilizer factory or sabotage at the Crystal River nuclear 
power plant. 

To complicate consequence management, small attacks might be 
launched at hospitals, police stations, and emergency operations 
centers. Many state and city emergency operations centers are par- 
ticularly vulnerable. Often they lack physical security protection 
and redundant communications. Backup centers and mobile com- 
mand posts usually do not exist. For example, the New York City 
Emergency Operations Center was on the 23rd floor of 7 World 
Trade Center. When the building was destroyed during the 9/11 
attacks, the city had no adequate secondary command and control 
capability available. It took three days to reconstitute all the func- 
tions and capabilities lost by the destruction of the emergency oper- 
ations center.° 

Another vulnerability that might be exploited is the tendency of 
local first responders to rush to the scene of a disaster. Often people, 
supplies, and services are spontaneously mobilized and sent into a 
disaster-stricken area. This phenomenon is called convergence.’ It can 
lead to congestion, create confusion, hinder the delivery of aid, com- 
promise security, and waste scarce resources. This proved to be a 
major concern during the response to the September 11 attack on the 
World Trade Center. When the first tower was struck, firefighters, 
police officers, and emergency medical technicians from all over the 
metropolitan area streamed to the site, leaving other parts of the city 
vulnerable and, after the towers collapsed, creating tremendous prob- 
lems in accounting for emergency personnel.® 

By sequencing strikes in an attack, responders can also be targeted, 
creating additional casualties and chaos. For example, the timing of 
the strikes on the World Trade Center resulted in the loss of 343 fire 
personnel and destroyed 91 pieces of equipment. Included in the 
casualties were virtually the entire complement of the New York City 
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Fire Department’s trained cadre of hazardous material (Hazmat) 
response specialists.’ 

In addition, attacks could well use “secondary devices” specifically 
intended to harm first responders and civilian onlookers. Explosives 
are commonly used for this purpose,'° but other weapons might be 
employed as well. Employing small amounts of various chemical, 
biological, toxin, or radiological agents in the ancillary strikes against 
first responders might further confuse a coordinated response. In this 
manner, an enemy lacking robust delivery systems, such as cruise 
missiles and UAVs, or large amounts of deadly agents could still 
achieve the disruptive effects and psychological casualties that might 
be caused by the use of unconventional weapons. 

Information warfare could be a particularly useful instrument to 
supplement a mass disruption attack. For example, in 1992, the 
London Ambulance Service installed a faulty computer dispatch 
service. Delays resulting from dispatching snafus resulted allegedly 
in the deaths of 20 to 30 patients. An intentional disruption of com- 
puter dispatching services during a crisis might result in even far 
greater chaos and disruption. Alternatively, electronic jamming might 
be used to interrupt emergency frequencies. Meanwhile the Internet, 
as was the case after the 9/11 attacks, could be employed to spread 
rumors and disinformation or be the target of denial-of-service 
attacks." In fact, this should be expected as a matter of course. The 
increasing likelihood of cyberstrikes following physical attacks 
appears to be becoming an established trend.!? Additionally, as after 
the September 11 strikes, a mass disruption attack would likely gen- 
erate unprecedented local levels of user demand, severely stressing 
servers and some Web sites such as popular news portals.!% 

In practice, mass disruption attacks could take many forms. 
Vulnerabilities that might make choice targets for a coordinated 
attack can vary significantly from region to region. Sections of the 
country with high populations, heavy industry, and concentrated 
transportation networks will present different kinds of targets than 
areas with dispersed populations and scattered infrastructure. For 
example, urban centers, with large populations, commuters, and 
tourists that could spread an infectious disease quickly, would be bet- 
ter targets for an orchestrated series of contagious biological agent 
attacks. 
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Given the many potential variables involved, predicting the bal- 
ance of advantage between attacker and defender in this form of com- 
petition is difficult. A major attack would probably be difficult and 
costly to execute, but might reap substantial damage. Elements of this 
tactic, however, could be employed on a smaller scale and used very 
effectively for limited cost and at much less risk. Indeed, it may be 
only a matter of time before the United States faces such threats. Most 
of the means to launch such attacks are within the grasp of many 
potential state and nonstate enemies. A skilled and determined leader 
may be the only element missing from the mix of capabilities required 
to launch such an attack. Leadership, in fact, could be the key variable 
in determining whether these attacks against the United States ever 
become a reality. If such enemies do arise, they may well find that the 
element of surprise is on their side. 


THE FUTURE OF TECHNOLOGY 


Much effort has been made to harness technology in the war on ter- 
rorism. Most of the technology being applied is “off-the-shelf.” In 
other words, existing equipment and technical capabilities are being 
applied to address new problems. As research in science and technol- 
ogy looks to develop new, cutting-edge long-term solutions there 
may be some technologies that provide dramatic new advantages. 
Technology may, however, also unleash unprecedented threats. 
Among the new innovations to consider closely are those resulting 
from new biotechnologies and directed energy weapons. 


One of the promising areas for enhancing homeland security is in the 
area of biotechnology. In particular, advances in biotechnology may 
offer up dramatic new opportunities to improve defenses against 
chemical, biological, and toxin agents. Nanotechnologies, or more 
likely microelectrical mechanical systems (MEMS) that might employ 
nanotechnologies, in particular, hold tremendous promise for creat- 
ing incredibly small machines that could become an arsenal for fight- 
ing bioweapons. Devices could be manufactured on an industrial 
scale and used virtually anywhere. Once the technology has matured, 


Sauter ch17-18 3/21/05 


12:59 PM Page 381 $ 


CHAPTER 18 * THE FUTURE OF HOMELAND SECURITY 381 


Adversarial Uses 
of Advanced 
Technologies 


it might be applied to a variety of purposes, produced and employed 
relatively cheaply, and widely proliferated. 

Advances in chemistry and biology could result in cheap and 
widely proliferated systems that can provide screening and early 
detection.!* For example, “lab-on-a-chip” technologies that duplicate 
operations performed in a conventional laboratory with specially 
designed chip architectures consisting of interconnected fluid reser- 
voirs and pathways that can be used to assay cells or individual mol- 
ecules are currently being commercially developed as diagnostic tools. 
Potentially, such technologies could provide treatments as well.!® 

The list of other innovations that could potentially aid biodefenses 
is rather substantial, including high-throughput laboratories for test- 
ing and experimentation that could vastly expand the national capac- 
ity to screen and analyze materials as well as support vaccine and 
other antigen development programs.'° New detectors capable of 
better screening against infectious diseases or smuggling bioweapons 
may become available.” Remote detection of bioattacks employing 
spectral imagery and new forms of radar could also mature over the 
next decade.'8 

The uncertainty surrounding these new defenses relates to how 
soon they will mature from experimental systems to full-scale com- 
mercial and military use. Some of these technologies, particularly 
those relying on advances in the rapidly growing field of bioinfor- 
matics, may be available in the near term. Others may not appear 
before the end of the decade.” 


As with most advances in biotechnology, innovations that enhance 
U.S. defenses might also be used to fashion better weapons. The pro- 
liferation of biological and toxin threats will likely only grow with 
time. Biotechnology is one of the fastest growing commercial sectors 
in the world. The number of biotechnology companies in the United 
States alone has tripled since 1992. These firms are research-inten- 
sive, bringing new methods and products to the marketplace every 
day, and many of the benefits of this effort are largely dual-use, 
increasing the possibility that knowledge, skills, and equipment 
could be adopted to a biological agent program. As the global 
biotechnology industry expands, nonproliferation efforts will have a 
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difficult time keeping pace with the opportunities available to field a 
bioweapon.”? 

In addition, biological science and the commercial applications of 
biotechnology innovations are evolving rapidly. An analysis done 
less than a decade ago may already be out of date in capturing the 
growing capability of even moderately skilled and equipped actors to 
produce new and more effective weapons. The pharmaceutical indus- 
try, for example, has invested enormous effort in making drugs more 
stable for oral or aerosol delivery and thus, unintentionally, is devel- 
oping the tools for producing the next generation of easily deliverable 
biological weapons.” 

Although there are already many obtainable pathogens that could 
serve as effective biological weapons, in the future there could be 
other dangers as well. A sophisticated and reasonably well financed 
enemy could introduce previously unknown and potentially very 
deadly threats. Advances in molecular and biological engineering 
open up the possibility of fashioning new organisms or modifying 
existing diseases by means such as transferring pathogenic properties 
between different agents. Enemies might, for example, breed strains 
of bacteria resistant to commonly used antibiotics.” 

In particular, genomics and genetic engineering could serve as 
tools for developing new weapons.” Upwards of 200 bacterial 
genomes have already been sequenced, and gene survey techniques 
are being used to identify unique characteristics that determine viru- 
lence and pathology.” This information can be used to craft new 
weapons as well as new cures. One way that this can be done is 
through recombinant DNA technology. Recombinant DNA is created 
by incorporating material from two or more sources into a single 
recombinant molecule. Currently, recombinant DNA processes are 
difficult and have a low success rate. When new DNA is created, there 
is no guaranteed way to pass the genetically altered organism’s 
newly obtained trait on to subsequent generations. However, recom- 
binant DNA technology, in turn, enables new forms of genetic engi- 
neering. Through cloning, for example, sections of DNA can be 
inserted into a cell, in effect, creating new organisms.” 

The science behind recombinant DNA technology is widely 
known, and legitimate scientific experiments have demonstrated 
how this knowledge can be misused. In 2001, a team of Australian 
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scientists inadvertently altered a strain of mousepox creating a 
highly virulent microorganism that proved deadly, even to labora- 
tory mice already vaccinated against the disease.’ This accident 
demonstrated the potential for malevolent research to create new 
and unexpected threats. Further highlighting the potential for creat- 
ing recombinant biological weapons was the successful effort of a 
team of researchers in New York who reconstituted a polio virus 
from DNA samples, suggesting that new designer diseases or extinct 
diseases could be assembled from basic genetic material.” It cannot 
be assumed that enemies will not have access to the technical skills 
required to conduct similar research. Of particular concern is the 
proliferation of the research and skills of thousands of Russian sci- 
entists trained under the former Soviet Union’s extensive 
bioweapons program.”8 

Recent advances in biotechnology could also eventually lead to 
pathogens designed to cause disease in only certain types of people 
or even unique individuals, depending on their genetic makeup, 
sometimes called an “ethnic bullet.””? The difficulties in perfecting 
such a weapon, however, might be significant. An enemy would have 
to identify a genetic marker that was unique to the targeted popula- 
tion. Such an approach might work well against an isolated group. 
The United States, with its diverse and genetically mixed population, 
on the other hand, would represent a problematic target, though an 
enemy might perhaps attempt to target a particular subgroup in the 
country. Given the many variables and difficulties of developing such 
a bioagent, it could well take decades to develop a practical 
weapon.°? 

Biotechnology might also be used to produce genetically engi- 
neered antimaterial weapons. Through the application of recombi- 
nant DNA technologies and cloning techniques, it could eventually 
be possible to develop fast-acting microbes with particular behaviors 
that can be targeted against certain materials. For example, biodegra- 
tive microorganisms might be created that can damage hydrocarbons, 
concrete, plastics, rubber, composite materials, or even metals.?! Such 
weapons might be used to attack critical infrastructure, such as rup- 
turing power cables or pipelines. Unlike a conventional bomb that 
might breech one point in a pipeline, an antimaterial bioweapon 
might infect and incapacitate an entire system.” 
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Directed energy technologies are used in the production of concen- 
trated beams of electromagnetic energy, such as lasers. Future directed 
energy weapons may have their greatest impact on improving protec- 
tion of critical infrastructure. American military developments in 
mobile high-energy lasers, for example, could produce, within a 
decade, prototype weapons capable of providing point defenses of 
areas against artillery, rockets, mortars, missiles, and low-flying 
unmanned aerial vehicles (UAVs). Ground-based lasers are being 
designed not only for battlefield uses, but also to protect Israeli popu- 
lation centers from terrorist attacks using Katyusha rockets and other 
improvised rocket, artillery, and mortar systems.” There is no reason 
these systems could not be employed in the United States as well. 

Directed energy technologies may have a number of homeland 
security applications. They might, for example, be used at airports 
to defend planes taking off and landing from attack by shoulder- 
fired missiles or provide defenses for critical infrastructure, govern- 
ment buildings, or public events against strikes by makeshift 
rockets or missiles. Eventually, tactical lasers may also be useful 
against low-flying cruise missiles or UAVs. It is, however, not likely 
that these capabilities would be widely available before the end of 
the decade. 


THE FUTURE OF 
HOMELAND SECURITY STRUCTURES 


While there will likely be changes in the war on terrorism resulting 
from the changing nature of the terrorist threat and the emergence of 
new technologies, there will also no doubt be innovations resulting 
from efforts to enhance and upgrade homeland security regimes. 
Indeed, history suggests changes are inevitable. The National 
Security Act of 1947 created the National Security Council, the 
Department of Defense, and the Central Intelligence Agency, the pri- 
mary weapons used in the Cold War. In practice, however, most of the 
instruments used to fight the Cold War from NATO to nuclear deter- 
rence and containment evolved over a decade through a process of 
experimentation, improvisation, and trial and error. Much as during 
the Cold War, it is unrealistic to believe that the United States could 
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establish all the right instruments to fight a complex global war on 
terrorism in short order. 


One area that will likely gain increased attention in the years ahead is 
the organization of the Department of Homeland Security. Among 
the issues that will likely be addressed are the appropriate roles and 
missions of the department. Policy makers will have to decide, for 
example, if all the appropriate critical homeland security missions 
have been consolidated in the department or, in some cases, if con- 
solidation has gone too far. 

Consolidation of biomedical homeland security response assets 
offers an example of the challenge of getting the right balance of 
responsibilities. The Homeland Security Act transferred the opera- 
tional resources of several agencies to the DHS, including oversight of 
the Strategic National Stockpile. Managed by the Centers for Disease 
Control and Prevention (CDC) in the Department of Health and 
Human Services (HHS), the Strategic National Stockpile provides for 
the storage and deployment of pharmaceuticals, supplies, and equip- 
ment for responding to a national health emergency or disaster. The 
DHS also oversees the Metropolitan Medical Response System and 
the National Disaster Medical System, including national disaster 
medical assistance teams, veterinary medical assistance teams, and 
disaster mortuary support teams—formerly administered by the 
HHS. In addition, the DHS has assumed the functions of the HHS’s 
Office of Emergency Preparedness, which manages and coordinates 
federal health, medical, and health-related social services for major 
emergencies and disasters. While the DHS has overall supervision for 
these programs, the HHS retains responsibility for the day-to-day 
running of many of the key biomedical response programs.*4 

Bifurcating responsibility for medical response programs such as 
the National Strategic Stockpile between the HHS and DHS was 
probably a mistake. Managing complex programs through intera- 
gency memoranda of understanding is bureaucratic, inefficient, and 
unnecessary. Clearly, efficiencies could be gained by transferring 
responsibility and budgetary oversight of these efforts into one 
department or the other. 

The DHS lacks the expertise and experience to oversee large med- 
ical emergency response programs. It could well make more sense to 
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shift responsibility for overseeing the National Strategic Stockpile, the 
Metropolitan Medical Response System, and the National Disaster 
Medical System to HHS. 

Recognizing that the DHS had little to contribute to managing the 
National Strategic Stockpile, in 2004, the department turned manage- 
ment of the program back over to the HHS. The need for further 
changes and consolidation is still being debated. 


CHAPTER SUMMARY 


The future is a foreign country. Nothing is predetermined. Nothing is 
inevitable. Yet, there are two predictions that might be made with 
confidence. The threat of terrorism will remain with us for some years 
to come, and homeland security organizations, programs, and activi- 
ties will have to evolve to keep up, or better yet, stay ahead of the ter- 
rorists. 

In the future, terrorists will likely change their tactics, organiza- 
tions, and, perhaps, goals—searching for new ways to undermine 
U.S. security. Technology will almost certainly be a critical dynamic in 
this competition. Likewise, U.S. security systems will grow as lessons 
learned and new initiatives are adopted to meet the threat of global 
terrorism. 
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